CVE-2026-80917

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs on 32-bit systems using the "pci-host-cam-generic" driver during bus enumeration. On these systems, the configuration space is too large to be mapped in a single operation, requiring pci ecam create() to map each bus segment individually. This process relies on the pci ecam add bus callback to populate the per-bus mapping in cfg->winp[], which pci ecam map bus() then uses as the base for configuration access. Because the legacy CAM operations in pci-host-generic.c lack the ->add bus and ->remove bus callbacks, the per-bus mapping is never established, leading to a system crash when pci generic config read() attempts to access the NULL base.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.