CVE-2026-90034

In the Linux kernel, the following vulnerability has been resolved:

usb: image: mdc800: change kmalloc() to kzalloc()

Change the kmalloc() calls in usb_mdc800_init() for irq_urb_buffer and

download_urb_buffer to kzalloc(), avoiding potential stack leaks if a

shorter message is received in mdc800_usb_irq() and

mdc800_usb_download_notify()