The Linux kernel’s PCI subsystem contains a flaw in the __resource_resize_store() routine, which exposes the resourceN_resize sysfs attribute. This routine resizes a device’s Base Address Register without enforcing that the caller has the CAP_SYS_ADMIN capability, relying only on file permissions. An attacker with write access to this sysfs entry can therefore alter PCI configuration, potentially destabilize drivers or disrupt device communication. The change offers a clear privilege escalation path for local users or attackers who can gain local file write rights.

Any system running a Linux kernel version that lacks the CAP_SYS_ADMIN check in __resource_resize_store() is vulnerable. The issue is present in the generic kernel code base and applies to all distributions that ship the affected kernel branch until the fix is applied.

The CVSS score of 7.0 indicates high severity, while the absence of a privilege check allows local elevation. The EPSS score of < 1% indicates a very low but non-zero likelihood of exploitation; however, the attack vector is local and does not network access. The vulnerability is not listed in the CISA KEV catalog. An attacker would need the ability to write to the resourceN_resize sysfs file, which normally requires root, but compromised permissions or misconfiguration could enable the exploitation. Overall risk is elevated for systems that have not yet applied the patch.