Review reviewHigh

CVE-2026-64460

Linux

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriov_restore_vf_rebar_state() uses the VF Resizable BAR Control register to decide how many VF BARs to restore (nbars) and which VF BAR each iteration addresses (bar_idx). bar_idx indexes into dev->sriov->barsz[], which has only PCI_SRIOV_NUM_BARS (6) entries. When a device does not respond, config reads typically return PCI_ERROR_RESPONSE (~0). Both fields are 3 bits wide, so nbars and bar_idx both evaluate to 7. The barsz[] access then goes out of bounds. UBSAN reports...

CVSS: 7
EPSS: -
CISA KEV: Not listed
Published: 2026.07.25

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 5a8f77e24a30bbce2fa57926f3dede84894fd10a < b77524621250407386f44c6eea7e5e4619ada1ce, >= 5a8f77e24a30bbce2fa57926f3dede84894fd10a < 55fd485e66d0ad5c762c23dba1461fe9c741cd96, >= 5a8f77e24a30bbce2fa57926f3dede84894fd10a < f34f1712229d71ce4286440fef12526fd4590b37, >= 6.17
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
CWE: Not available