CVE-2026-97505

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the PCI sysfs implementation where the resource resize store() function allows writing to the resourceN resize sysfs attribute to change a Base Address Register (BAR) size without verifying necessary capabilities, relying solely on file access checks. Resizing a BAR modifies the PCI device configuration, which can disrupt active drivers and trigger resource file updates via sysfs update groups() during the conversion to static attributes. This allows unprivileged users to perform BAR resize operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.