CVE-2026-90280
Description
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime suspend callback may run after pm_runtime_enable() and before pm_runtime_forbid(). In this case, a crash occurs because runtime suspend/resume dereferences qmp->phy pointer, which is not yet initialized: `if (!qmp->phy->init_count) {` This can also happen if user re-enables runtime-pm via the sysfs attribute before qmp phy is initialized. Similarly to other qcom phy drivers, introduce a qmp->phy_initialized variable that can be used to avoid relying on the possibly uninitialized phy pointer.
How to fix
- Linux Linux9b28287c5dea7650e6dd317591b9e82b6e145365, f4e39ab1b2009a89c60e4cb9dbefb8140d405eff, 5547fd950d6bf72de861b6934341e7bb0888640c, 03455404fb6cbfd65842695df26739853fc1516b, 142c5593379273264474f31d5956b1a0065cd576 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e464a3180a43b6596bd267f9f274e1793bfb8150 ≤ v < 9b28287c5dea7650e6dd317591b9e82b6e145365, e464a3180a43b6596bd267f9f274e1793bfb8150 ≤ v < f4e39ab1b2009a89c60e4cb9dbefb8140d405eff, e464a3180a43b6596bd267f9f274e1793bfb8150 ≤ v < 5547fd950d6bf72de861b6934341e7bb0888640c, e464a3180a43b6596bd267f9f274e1793bfb8150 ≤ v < 03455404fb6cbfd65842695df26739853fc1516b, e464a3180a43b6596bd267f9f274e1793bfb8150 ≤ v < 142c5593379273264474f31d5956b1a0065cd576, 6.6 | 9b28287c5dea7650e6dd317591b9e82b6e145365, f4e39ab1b2009a89c60e4cb9dbefb8140d405eff, 5547fd950d6bf72de861b6934341e7bb0888640c, 03455404fb6cbfd65842695df26739853fc1516b, 142c5593379273264474f31d5956b1a0065cd576 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.