{"api_version":"1","generated_at":"2026-10-29T12:52:10+00:00","cve":"CVE-2023-54326","urls":{"html":"https://cve.report/CVE-2023-54326","api":"https://cve.report/api/cve/CVE-2023-54326.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-54326","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-54326"},"summary":{"title":"misc: pci_endpoint_test: Free IRQs before removing the device","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: pci_endpoint_test: Free IRQs before removing the device\n\nIn pci_endpoint_test_remove(), freeing the IRQs after removing the device\ncreates a small race window for IRQs to be received with the test device\nmemory already released, causing the IRQ handler to access invalid memory,\nresulting in an oops.\n\nFree the device IRQs before removing the device to avoid this issue.","state":"PUBLISHED","assigner":"Linux","published_at":"2025-12-30 13:16:21","updated_at":"2026-08-04 11:16:40"},"problem_types":[],"metrics":[{"version":"3.1","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","type":"Secondary","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"DECLARED","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315","name":"https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55","name":"https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab","name":"https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c","name":"https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521","name":"https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c","name":"https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7","name":"https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-54326","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54326","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 dd2210379205fcd23a9d8869b0cef90e3770577c git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 14bdee38e96c7d37ca15e7bea50411eee25fe315 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 38d12bcf4e2ce3d285eb29644a79a54f42040fab git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 f61b7634a3249d12b9daa36ffbdb9965b6f24c6c git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 4.19","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 4.19 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 4.19.291 4.19.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.4.251 5.4.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.10.188 5.10.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.15.121 5.15.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.1.40 6.1.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.4.5 6.4.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.5 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2023","cve_id":"54326","cve":"CVE-2023-54326","epss":"0.001250000","percentile":"0.025820000","score_date":"2026-08-06","updated_at":"2026-08-07 00:14:20"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/misc/pci_endpoint_test.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7","status":"affected","version":"e03327122e2c8e6ae4565ef5b3d3cbe4364546a1","versionType":"git"},{"lessThan":"dd2210379205fcd23a9d8869b0cef90e3770577c","status":"affected","version":"e03327122e2c8e6ae4565ef5b3d3cbe4364546a1","versionType":"git"},{"lessThan":"cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521","status":"affected","version":"e03327122e2c8e6ae4565ef5b3d3cbe4364546a1","versionType":"git"},{"lessThan":"14bdee38e96c7d37ca15e7bea50411eee25fe315","status":"affected","version":"e03327122e2c8e6ae4565ef5b3d3cbe4364546a1","versionType":"git"},{"lessThan":"c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55","status":"affected","version":"e03327122e2c8e6ae4565ef5b3d3cbe4364546a1","versionType":"git"},{"lessThan":"38d12bcf4e2ce3d285eb29644a79a54f42040fab","status":"affected","version":"e03327122e2c8e6ae4565ef5b3d3cbe4364546a1","versionType":"git"},{"lessThan":"f61b7634a3249d12b9daa36ffbdb9965b6f24c6c","status":"affected","version":"e03327122e2c8e6ae4565ef5b3d3cbe4364546a1","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/misc/pci_endpoint_test.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.19"},{"lessThan":"4.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.291","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.251","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.188","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.121","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.40","versionType":"semver"},{"lessThanOrEqual":"6.4.*","status":"unaffected","version":"6.4.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.5","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.19.291","versionStartIncluding":"4.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.4.251","versionStartIncluding":"4.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.188","versionStartIncluding":"4.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.121","versionStartIncluding":"4.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.40","versionStartIncluding":"4.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4.5","versionStartIncluding":"4.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5","versionStartIncluding":"4.19","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: pci_endpoint_test: Free IRQs before removing the device\n\nIn pci_endpoint_test_remove(), freeing the IRQs after removing the device\ncreates a small race window for IRQs to be received with the test device\nmemory already released, causing the IRQ handler to access invalid memory,\nresulting in an oops.\n\nFree the device IRQs before removing the device to avoid this issue."}],"metrics":[{"cvssV3_1":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"providerMetadata":{"dateUpdated":"2026-08-04T09:19:03.239Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7"},{"url":"https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c"},{"url":"https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521"},{"url":"https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315"},{"url":"https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55"},{"url":"https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab"},{"url":"https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c"}],"title":"misc: pci_endpoint_test: Free IRQs before removing the device","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2023-54326","datePublished":"2025-12-30T12:37:09.698Z","dateReserved":"2025-12-30T12:35:56.209Z","dateUpdated":"2026-08-04T09:19:03.239Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-12-30 13:16:21","lastModifiedDate":"2026-08-04 11:16:40","problem_types":[],"metrics":{"cvssMetricV31":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2023","CveId":"54326","Ordinal":"1","Title":"misc: pci_endpoint_test: Free IRQs before removing the device","CVE":"CVE-2023-54326","Year":"2023"},"notes":[{"CveYear":"2023","CveId":"54326","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: pci_endpoint_test: Free IRQs before removing the device\n\nIn pci_endpoint_test_remove(), freeing the IRQs after removing the device\ncreates a small race window for IRQs to be received with the test device\nmemory already released, causing the IRQ handler to access invalid memory,\nresulting in an oops.\n\nFree the device IRQs before removing the device to avoid this issue.","Type":"Description","Title":"misc: pci_endpoint_test: Free IRQs before removing the device"}]}}}