CVE-2026-90239

CVE-2026-90239

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()

isp4if_alloc_fw_gpumem() allocates several GPU memory pools in sequence.

If one of them fails, it jumps to error_no_memory and returns -ENOMEM

without releasing the pools that were already allocated, leaking them.

Release the already-allocated pools before returning. isp4if_gpu_mem_free()

is a no-op on pools that were not allocated, so calling

isp4if_dealloc_fw_gpumem() here safely frees exactly the pools that

succeeded.

isp4if_gpu_mem_free() previously logged an error for a NULL entry, which

is a normal case during partial-allocation cleanup, so make it silent.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-09-17T21:17Z
References (2)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:07Z
    media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()
    cvelistv5