CVE-2026-90271

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpam_disable() has been run in response to an error interrupt then a dereference of a NULL pointer occurs as mpam_disable() sets the drvdata to NULL. Add an early return to the driver remove callback to avoid this.

SeverityUnknown
CVSS—
Exploit probability10. percentile0.2%
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linuxa29044c9c83513c7463de2adb84c169685562ad2, fc996c39689bb15aa80e5366809434f7258fb703 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxf04046f2577a5c76167333ca99d3903ee5331ba0 ≤ v < a29044c9c83513c7463de2adb84c169685562ad2, f04046f2577a5c76167333ca99d3903ee5331ba0 ≤ v < fc996c39689bb15aa80e5366809434f7258fb703, 6.19a29044c9c83513c7463de2adb84c169685562ad2, fc996c39689bb15aa80e5366809434f7258fb703

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-90271 · Linux · Dark Radar