CVE-2026-53051
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/06/2026
Last modified:
21/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on<br />
<br />
When PERST# is deasserted twice (assert -> deassert -> assert -> deassert),<br />
a CBB (Control Backbone) timeout occurs at DBI register offset 0x8bc<br />
(PCIE_MISC_CONTROL_1_OFF). This happens because pci_epc_deinit_notify()<br />
and dw_pcie_ep_cleanup() are called before reset_control_deassert() powers<br />
on the controller core.<br />
<br />
The call chain that causes the timeout:<br />
<br />
pex_ep_event_pex_rst_deassert()<br />
pci_epc_deinit_notify()<br />
pci_epf_test_epc_deinit()<br />
pci_epf_test_clear_bar()<br />
pci_epc_clear_bar()<br />
dw_pcie_ep_clear_bar()<br />
__dw_pcie_ep_reset_bar()<br />
dw_pcie_dbi_ro_wr_en() core_rst) core_rst). Accessing them before this point<br />
results in a CBB timeout because the hardware is not yet operational.<br />
<br />
Fix this by moving pci_epc_deinit_notify() and dw_pcie_ep_cleanup() to<br />
after reset_control_deassert(pcie->core_rst), ensuring the controller is<br />
fully powered on before any DBI register accesses occur.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11.11 (including) | 6.12 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12.2 (including) | 6.12.91 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.18.33 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 7.0.10 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



