Strix
75K

CVE-2026-97505

UnknownEPSS 0.16%

Last modified

CVE-2026-97505 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() Currently, the __resource_resize_store() allows writing to the resourceN_resize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on the file access check. Resizing a BAR modifies PCI device configuration and can disrupt active drivers. After the upcoming conversion to static attributes, it will also trigger resource file updates via sysfs_update_groups(). Add a CAP_SYS_ADMIN check to prevent unprivileged users from performing BAR resize operations.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() Currently, the __resource_resize_store() allows writing to the resourceN_resize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on the file access check. Resizing a BAR modifies PCI device configuration and can disrupt active drivers. After the upcoming conversion to static attributes, it will also trigger resource file updates via sysfs_update_groups(). Add a CAP_SYS_ADMIN check to prevent unprivileged users from performing BAR resize operations.

Metrics

EPSS Probability
0.16%

4.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 91fa127794ac1c48069479b9d45eb4c7378c0e30, < 0be4e21287e1e4865b9de498e1acc65b873f52f5; >= 91fa127794ac1c48069479b9d45eb4c7378c0e30, < d02dd7ce8e52b66b7d3b6eca2a7d81e7f5b10a62; >= 91fa127794ac1c48069479b9d45eb4c7378c0e30, < b722a607f858b9cd036075ea0efad553fb98e982; >= 91fa127794ac1c48069479b9d45eb4c7378c0e30, < cbf0628c0b7db86c5ce36451f088101546acbf1d; >= 91fa127794ac1c48069479b9d45eb4c7378c0e30, < 25ec7f57deceec633f27bc93b615f951e2ade814
LinuxLinux6.1

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-97505?
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() Currently, the __resource_resize_store() allows writing to the resourceN_resize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on the file access check. Resizing a BAR modifies PCI device configuration and can disrupt active drivers. After the upcoming conversion to static attributes, it will also trigger resource file updates via sysfs_update_groups(). Add a CAP_SYS_ADMIN check to prevent unprivileged users from performing BAR resize operations.
How severe is CVE-2026-97505?
Severity scoring for CVE-2026-97505 is pending analysis. The EPSS model estimates a 0.16% probability of exploitation in the next 30 days.
How do I fix CVE-2026-97505?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-97505?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST