OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90316

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's Direct Rendering Manager (DRM) for OMAP devices, where improper handling of interrupt service routines (ISRs) can lead to potential use-after-free (UAF) conditions due to stack-allocated objects being passed to these ISRs. This flaw could allow an attacker to exploit the UAF scenario, potentially leading to system instability or arbitrary code execution. Organizations using affected Linux kernel versions, particularly those deploying OMAP hardware, should prioritize patching this vulnerability to mitigate associated risks.

CVE
CVE-2026-90316
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/omap: dsi: Do not copy isr table To be able to unregister stuff from isrs, the corresponding table was copied. Nobody seems to unregister stuff that way, so it does not help. But there are stack-allocated objects passed to these isrs giving chances of UAF of these objects if irqs are unregistered while they are handled, so better do not copy that table.