OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-90007

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of MSI-X vectors in the pm8001 SCSI driver, where an incorrect index is used during the rollback process when freeing IRQs. This flaw can lead to improper cleanup of registered interrupt handlers, potentially allowing for denial-of-service conditions or unexpected behavior in systems relying on this driver. Organizations using Linux systems with the pm8001 driver should prioritize addressing this issue to ensure system stability and security.

CVE
CVE-2026-90007
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001_request_msix() unwinds previously registered handlers with free_irq() when request_irq() fails. The rollback loop uses the failing index i for every iteration instead of the already registered vector index j. That passes the wrong IRQ/dev_id pair to free_irq() and leaves the earlier handlers installed. Use j for both pci_irq_vector() and the matching irq_vector entry in the rollback loop.