CVE-2026-68327wan: wanxl: Only reset hardware after BAR mapping
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping wanxl_pci_init_one() stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early probe failures then unwind through wanxl_pci_remove_one(), including failure to allocate the coherent status area or to restore the DMA mask. wanxl_pci_remove_one() unconditionally calls wanxl_reset(), and wanxl_reset() dereferences card->plx. On those early failures card->plx is still NULL, so the error path can dereference a NULL MMIO pointer. Only issue the hardware reset once the BAR mapping exists. The remaining cleanup in wanxl_pci_remove_one() already checks whether later resources were allocated. This issue was found by a static analysis checker and confirmed by manual source review.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ef394eeb9d5ec6db8d979eec6d27f56c2ebc6523; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3d9617d856ebddcdddbab0ce877c397420f59f55; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 897e289db1e4d00ca6419cfe733c646492147270; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f4834132773f15ffb255127499c8443947fa7d0f; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b9e2ff70e96acf83693b27987e0390bad9f83efa; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 59cbe6cfa0fa23c192351cc284e30707309f6741; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2fe22d58b3797d741570f9873b26653fd511576c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 91957b89da995607cb654b1f9a3c126ddbaee10f | CNA record |
References
- https://git.kernel.org/stable/c/ef394eeb9d5ec6db8d979eec6d27f56c2ebc6523
- https://git.kernel.org/stable/c/3d9617d856ebddcdddbab0ce877c397420f59f55
- https://git.kernel.org/stable/c/897e289db1e4d00ca6419cfe733c646492147270
- https://git.kernel.org/stable/c/f4834132773f15ffb255127499c8443947fa7d0f
- https://git.kernel.org/stable/c/b9e2ff70e96acf83693b27987e0390bad9f83efa
- https://git.kernel.org/stable/c/59cbe6cfa0fa23c192351cc284e30707309f6741
- https://git.kernel.org/stable/c/2fe22d58b3797d741570f9873b26653fd511576c
- https://git.kernel.org/stable/c/91957b89da995607cb654b1f9a3c126ddbaee10f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.