CVE-2026-72329

In the Linux kernel, the following vulnerability has been resolved:

net/liquidio: drop cached VF pci_dev LUT

The PF SR-IOV enable path caches VF pci_dev pointers in

dpiringtovfpcidevlut[] by iterating with pciget_device(). Those

entries do not own a reference, because the iterator drops the previous

device reference on each step. The cached pointer is then dereferenced

later when handling OCTEONVFFLR_REQUEST.

Replace the cached VF mapping with runtime lookup on the mailbox DPI

ring: derive the VF index from q_no, resolve the VF via exported PCI

IOV helpers, validate it with the PF pointer and VF ID, then issue

pcieflr() and drop the reference with pcidev_put(). Remove the

unused VF lookup table initialization and cleanup.