CVE-2026-90055

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the usbatm atm init() function where the ci range.vpi bits and ci range.vci bits fields are incorrectly initialized to a sentinel value of -1. These fields are subsequently used as bit shift counts within the vcc connect() function. Shifting by a negative value results in undefined behavior and triggers a shift-out-of-bounds condition. This occurs because the system attempts to perform operations such as vpi >> dev->ci range.vpi bits and 1 << vcc->dev->ci range.vpi bits using the invalid negative exponent.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.