CVE-2026-93206

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the procfs interface where the proc bus pci read() function incorrectly uses capable(CAP SYS ADMIN) to determine config space read access. This function checks the credentials of the task currently calling read() instead of the credentials of the process that originally opened the file. Consequently, if a privileged process opens the config space file and passes the file descriptor to an unprivileged process, the unprivileged process can bypass restrictions and read the entire config space. This creates a discrepancy with the sysfs interface, which correctly validates credentials at the time the file is opened.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.