CVE-2026-90034

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the usb image mdc800 component where kmalloc() is used instead of kzalloc() within the usb mdc800 init() function for the irq urb buffer and download urb buffer variables. This can lead to potential stack leaks when shorter messages are received in the mdc800 usb irq() and mdc800 usb download notify() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.