# PCI: Fix pci_slot_trylock() error handling

CVE record · `CVE-2026-43211`

- **Identifiers:** `CVE-2026-43211`
- **State:** Confirmed
- **Severity:** CVSS 7.8 High
- **Critical:** No
- **CNA:** Linux
- **Weakness (CWE):** [CWE-667](https://cwe.mitre.org/data/definitions/667.html)
- **Tags:** [CWE-667](https://agentprime.io/advisories/tag/cwe-667.md)
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 6 May 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 6 May 2026, 11:28 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `e2355d513b89a2cb511b4ded0deb426cdb01acd0 to before ebb27b7399ab8b9eb1f792b329aa5f6250c590d4` (git)
  - affected: `04e85a3285b0e5c5af6fd2c0fd6e95ffecc01945 to before fbe06a3058114bf95a17a4941b205f4b321c6f0a` (git)
  - affected: `7253b4fed46471cc247c6cacefac890a8472c083 to before 943ed56606a7ab2fe5a99cad572dd17d484310c7` (git)
  - affected: `78c6e39fef5c428960aff742149bba302dd46f5a to before a19b61fdb958ffadbba85b43c991eb9fc70c1c1c` (git)
  - affected: `a4e772898f8bf2e7e1cf661a12c60a5612c4afab to before 0425aaf20b407d2f2cf3bf469808e4a35f9abb8b` (git)
  - affected: `a4e772898f8bf2e7e1cf661a12c60a5612c4afab to before bd435f4b738130d732ef64e0e57e45185f77165d` (git)
  - affected: `a4e772898f8bf2e7e1cf661a12c60a5612c4afab to before 8b08ea9690b212b7bf7f12414039259cf34b1aa0` (git)
  - affected: `a4e772898f8bf2e7e1cf661a12c60a5612c4afab to before 9368d1ee62829b08aa31836b3ca003803caf0b72` (git)
  - affected: `0790b89c7e911003b8c50ae50e3ac7645de1fae9` (git)
  - affected: `df77a678c33871a6e4ac5b54a71662f1d702335b` (git)
  - affected: `81c68e218ab883dfa368460a59b674084c0240da` (git)
  - affected: `5.10.226 to before 5.10.252` (semver)
  - and 6 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.11`
  - unaffected: `before 6.11` (semver)
  - unaffected: `5.10.252 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.202 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.165 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.128 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.75 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.16 to 6.18.*, inclusive` (semver)
  - unaffected: `6.19.6 to 6.19.*, inclusive` (semver)
  - unaffected: `7.0 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.8 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0011, the 1st percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 6 May 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-43211](https://www.cve.org/CVERecord?id=CVE-2026-43211)
- [NVD: CVE-2026-43211](https://nvd.nist.gov/vuln/detail/CVE-2026-43211)

### References from the CNA

- <https://git.kernel.org/stable/c/ebb27b7399ab8b9eb1f792b329aa5f6250c590d4>
- <https://git.kernel.org/stable/c/fbe06a3058114bf95a17a4941b205f4b321c6f0a>
- <https://git.kernel.org/stable/c/943ed56606a7ab2fe5a99cad572dd17d484310c7>
- <https://git.kernel.org/stable/c/a19b61fdb958ffadbba85b43c991eb9fc70c1c1c>
- <https://git.kernel.org/stable/c/0425aaf20b407d2f2cf3bf469808e4a35f9abb8b>
- <https://git.kernel.org/stable/c/bd435f4b738130d732ef64e0e57e45185f77165d>
- <https://git.kernel.org/stable/c/8b08ea9690b212b7bf7f12414039259cf34b1aa0>
- <https://git.kernel.org/stable/c/9368d1ee62829b08aa31836b3ca003803caf0b72>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-43211>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-43211/>. Everything for agents: <https://agentprime.io/llms.txt>.