perf/x86/intel/uncore: Fix die ID init and look up bugs

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2026-43344
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-05-08 14:16:44 UTC
Updated2026-11-06 16:18:35 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix die ID init and look up bugs In snbep_pci2phy_map_init(), in the nr_node_ids > 8 path, uncore_device_to_die() may return -1 when all CPUs associated with the UBOX device are offline. Remove the WARN_ON_ONCE(die_id == -1) check for two reasons: - The current code breaks out of the loop. This is incorrect because pci_get_device() does not guarantee iteration in domain or bus order, so additional UBOX devices may be skipped during the scan. - Returning -EINVAL is incorrect, since marking offline buses with die_id == -1 is expected and should not be treated as an error. Separately, when NUMA is disabled on a NUMA-capable platform, pcibus_to_node() returns NUMA_NO_NODE, causing uncore_device_to_die() to return -1 for all PCI devices. As a result, spr_update_device_location(), used on Intel SPR and EMR, ignores the corresponding PMON units and does not add them to the RB tree. Fix this by using uncore_pcibus_to_dieid(), which retrieves topology from the UBOX GIDNIDMAP register and works regardless of whether NUMA is enabled in Linux. This requires snbep_pci2phy_map_init() to be added in spr_uncore_pci_init(). Keep uncore_device_to_die() only for the nr_node_ids > 8 case, where NUMA is expected to be enabled.

Risk And Classification

Primary CVSS: v3.1 5.5 MEDIUM from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.001170000 probability, percentile 0.016270000 (date 2026-10-31)

Problem Types: CWE-617

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Linux Linux Kernel All All All All
Operating System Linux Linux Kernel 7.0 rc1 All All
Operating System Linux Linux Kernel 7.0 rc2 All All
Operating System Linux Linux Kernel 7.0 rc3 All All
Operating System Linux Linux Kernel 7.0 rc4 All All
Operating System Linux Linux Kernel 7.0 rc5 All All
Operating System Linux Linux Kernel 7.0 rc6 All All
Operating System Linux Linux Kernel 7.0 rc7 All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 9a7832ce3d920426a36cdd78eda4b3568d4d09e3 4eb511275e37c580156e787baab5232aeb0bfea0 git Not specified
CNA Linux Linux affected 9a7832ce3d920426a36cdd78eda4b3568d4d09e3 184870af0e73f8ea2577c751fa098681465249f2 git Not specified
CNA Linux Linux affected 9a7832ce3d920426a36cdd78eda4b3568d4d09e3 bdb35811ff41a1678620a407056b6372f350028a git Not specified
CNA Linux Linux affected 9a7832ce3d920426a36cdd78eda4b3568d4d09e3 c79ef3342632e71ac8612a2a1cc17ac84dd258b4 git Not specified
CNA Linux Linux affected 9a7832ce3d920426a36cdd78eda4b3568d4d09e3 6a5dc3ee97581da2907fc7acd62853f07184de67 git Not specified
CNA Linux Linux affected 9a7832ce3d920426a36cdd78eda4b3568d4d09e3 a16d1ec4dd0cdcf689f324adde6067083bce9099 git Not specified
CNA Linux Linux affected 5.12 Not specified
CNA Linux Linux unaffected 5.12 semver Not specified
CNA Linux Linux unaffected 6.1.191 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.109 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.50 6.18.* semver Not specified
CNA Linux Linux unaffected 6.19.14 6.19.* semver Not specified
CNA Linux Linux unaffected 7.0 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/bdb35811ff41a1678620a407056b6372f350028a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6a5dc3ee97581da2907fc7acd62853f07184de67 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/184870af0e73f8ea2577c751fa098681465249f2 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c79ef3342632e71ac8612a2a1cc17ac84dd258b4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/a16d1ec4dd0cdcf689f324adde6067083bce9099 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/4eb511275e37c580156e787baab5232aeb0bfea0 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report