CVE-2026-64460

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An array-index-out-of-bounds issue exists in the sriov restore vf rebar state() function. The function utilizes the VF Resizable BAR Control register to determine the number of VF BARs to restore (nbars) and the specific VF BAR for each iteration (bar idx). The bar idx variable indexes into the dev->sriov->barsz[] array, which contains only 6 entries. If a device fails to respond, configuration reads may return a PCI ERROR RESPONSE, causing both nbars and bar idx to evaluate to 7, which exceeds the array bounds. This was observed on an NVIDIA RTX PRO 1000 GPU during a failed GC6 power state exit when pci restore state() invoked the vulnerable function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.