Riskcovery

CVE-2026-90121

irqchip/gic-v5: Clear per-CPU IRS data on teardown

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v5: Clear per-CPU IRS data on teardown

IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without clearing that published state, leaving CPUs associated with freed memory.

On initialization failure and normal IRS teardown, clear the per-CPU IRS association by removing the stale pointer to irs_data. Also invalidate the per-CPU IAFFID state for any CPUs that were tied to the IRS before it was freed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5cb1b6dab2def316671ea2565291a86ad58b884c to before 0887d41abf76638942688cb0c0ff8087f52e2b33Affected
  • 5cb1b6dab2def316671ea2565291a86ad58b884c to before 54937af6f4a0d44c2852a203d457902f3264c906Affected
  • 5cb1b6dab2def316671ea2565291a86ad58b884c to before 3dfc0ab5fefd052c6028c4632b1fad8bdaf7967eAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.