Medium [CVE-2026-80621] Avoid dwc_pcie_rasdes_debugfs_deinit NULL dereference when no RAS DES capability

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability dwc_pcie_rasdes_debugfs_init() returns success when the controller has no RAS DES capability, leaving pci->debugfs->rasdes_info unset.

The common debugfs teardown path still calls dwc_pcie_rasdes_debugfs_deinit(), which dereferences rasdes_info unconditionally. Return early when no RAS DES state was allocated.

In that case no RAS DES mutex was initialized, so there is nothing to destroy. [mani: reworded subject] A flaw was found in the Linux kernel's PCI DesignWare Cores (DWC) driver. When the controller lacks RAS DES capability, the dwc_pcie_rasdes_debugfs_init() function can incorrectly report success, leaving a pointer uninitialized.

During debugfs teardown, the dwc_pcie_rasdes_debugfs_deinit() function then attempts to use this uninitialized pointer, leading to a NULL pointer dereference. This can allow a local attacker to cause a system crash, resulting in a Denial of Service (DoS).

Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-476.

Red Hat lists Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9 as not affected.