CVE-2026-90194
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on device_add() failures When device_add() fails after acpi_device_set_name() has allocated an instance ID and a new acpi_device_bus_id has been linked into acpi_bus_id_list, the rollback path only removes wakeup_list and detaches the ACPI handle data. That leaves the bus-ID bookkeeping behind and keeps the allocated instance number consumed. Move the bus-ID cleanup and wakeup-list removal into a single helper. Use it from both the normal device teardown path and the device_add() rollback path. The wakeup list node is initialized before registration, so it can be deleted without checking whether the device is wakeup- capable like in the original teardown path. [ rjw: Rename acpi_device_del_list() to acpi_device_cleanup() ] [ rjw: Subject and changelog edits ]
How to fix
- Linux Linux8cc2017aa804f157e717b5fd471e50fbddfec654, f30379b8a4e24623594235dd5aefb2957e0cc228, 83ee65feadc88de681abc6e977d54eceda95abd7, 15512c6b5dea72fb5f1f41c1aa96f3f32531ca03, 0b9053cd0955c7cd66d71a8442be33926d70e197, a414485ebc2aa50907d0ce97cde2b1a353696897 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d783156ea38431b20af0d4f910a6f9f9054d33b9 ≤ v < 8cc2017aa804f157e717b5fd471e50fbddfec654, d783156ea38431b20af0d4f910a6f9f9054d33b9 ≤ v < f30379b8a4e24623594235dd5aefb2957e0cc228, d783156ea38431b20af0d4f910a6f9f9054d33b9 ≤ v < 83ee65feadc88de681abc6e977d54eceda95abd7, d783156ea38431b20af0d4f910a6f9f9054d33b9 ≤ v < 15512c6b5dea72fb5f1f41c1aa96f3f32531ca03, d783156ea38431b20af0d4f910a6f9f9054d33b9 ≤ v < 0b9053cd0955c7cd66d71a8442be33926d70e197, d783156ea38431b20af0d4f910a6f9f9054d33b9 ≤ v < a414485ebc2aa50907d0ce97cde2b1a353696897, 3.14 | 8cc2017aa804f157e717b5fd471e50fbddfec654, f30379b8a4e24623594235dd5aefb2957e0cc228, 83ee65feadc88de681abc6e977d54eceda95abd7, 15512c6b5dea72fb5f1f41c1aa96f3f32531ca03, 0b9053cd0955c7cd66d71a8442be33926d70e197, a414485ebc2aa50907d0ce97cde2b1a353696897 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.