CVE-2026-90121

CVE-2026-90121

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v5: Clear per-CPU IRS data on teardown

IRS affinity setup publishes an IRS pointer and IAFFID state in the

per-CPU data before the remaining IRS initialization can fail. The

error path then frees the IRS data without clearing that published

state, leaving CPUs associated with freed memory.

On initialization failure and normal IRS teardown, clear the per-CPU

IRS association by removing the stale pointer to irs_data. Also

invalidate the per-CPU IAFFID state for any CPUs that were tied to the

IRS before it was freed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-09-17T21:17Z
References (3)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:06Z
    irqchip/gic-v5: Clear per-CPU IRS data on teardown
    cvelistv5