CVE-2026-90273

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable In the perf enable path, there are missing cases where cscfg_csdev_disable_active_config() is not called: - Branch broadcast is selected but not supported by the hardware - etm4_enable_hw() fails This can lead to a leak of config_desc->active_cnt. Fix this by properly calling cscfg_csdev_disable_active_config() in these error paths.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linuxf097b6969e9961365358fc5ba5892db2f284f020, ba63c62d4252f6bc58fd2a567075c72d03332562, 26f9e89bad5a7e3005d3dc97a2e2fa6d6b2b8bb6, d5f3dae82705d9388434892915008da3bb83c4ba, 7e4f2702bbadbde887a5d8897297720a7f037ee5, 0a47f0be6557b4a851addd430383a4dc7ee08752 or later

Affected products

ProductAffected versionsFixed in
Linux Linux810ac401db1fe432020d7936a199591000de8279 ≤ v < f097b6969e9961365358fc5ba5892db2f284f020, 810ac401db1fe432020d7936a199591000de8279 ≤ v < ba63c62d4252f6bc58fd2a567075c72d03332562, 810ac401db1fe432020d7936a199591000de8279 ≤ v < 26f9e89bad5a7e3005d3dc97a2e2fa6d6b2b8bb6, 810ac401db1fe432020d7936a199591000de8279 ≤ v < d5f3dae82705d9388434892915008da3bb83c4ba, 810ac401db1fe432020d7936a199591000de8279 ≤ v < 7e4f2702bbadbde887a5d8897297720a7f037ee5, 810ac401db1fe432020d7936a199591000de8279 ≤ v < 0a47f0be6557b4a851addd430383a4dc7ee08752, 5.15f097b6969e9961365358fc5ba5892db2f284f020, ba63c62d4252f6bc58fd2a567075c72d03332562, 26f9e89bad5a7e3005d3dc97a2e2fa6d6b2b8bb6, d5f3dae82705d9388434892915008da3bb83c4ba, 7e4f2702bbadbde887a5d8897297720a7f037ee5, 0a47f0be6557b4a851addd430383a4dc7ee08752

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.