CVE-2026-90316

drm/omap: dsi: Do not copy isr table

State: Published
Severity: 7.8 High
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/omap: dsi: Do not copy isr table

To be able to unregister stuff from isrs, the corresponding table was copied. Nobody seems to unregister stuff that way, so it does not help. But there are stack-allocated objects passed to these isrs giving chances of UAF of these objects if irqs are unregistered while they are handled, so better do not copy that table.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before b3cbd1451c240446ce170f514244e1cb65ec0de4Affected 4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before f6733460b6d483dea7bfb5cfceb11cbff31a60b7Affected 4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 542a6a3ec77cd29f953987f7263f32fb8acb097eAffected 4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 2c27a84ba8d1bfed046d0067161d92001605acccAffected 4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 9063b30faae8ccaacf003735560df3956dbb592fAffected 4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 30810bdf273b4c93f8731b96a7204f33e052180dAffected 4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 97c03b32b28a9f7f13f768f2b06e1eaafe850e66Affected
LinuxLinux	2.6.39Affected before 2.6.39Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before b3cbd1451c240446ce170f514244e1cb65ec0de4Affected
4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before f6733460b6d483dea7bfb5cfceb11cbff31a60b7Affected
4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 542a6a3ec77cd29f953987f7263f32fb8acb097eAffected
4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 2c27a84ba8d1bfed046d0067161d92001605acccAffected
4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 9063b30faae8ccaacf003735560df3956dbb592fAffected
4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 30810bdf273b4c93f8731b96a7204f33e052180dAffected
4ae2ddddf44cd9f73def2dbdb68c6859072262ff to before 97c03b32b28a9f7f13f768f2b06e1eaafe850e66Affected

LinuxLinux

2.6.39Affected
before 2.6.39Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.