CVE-2026-90123

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the irqchip/ast2700-intc component where the irq domain activate() callback is called from setup irq() while desc->lock is held and interrupts are disabled. The functions aspeed intc1 irq domain activate() and aspeed intc0 resolve route() use fwnode device is compatible(), which triggers fwnode property match string(). This process attempts to allocate memory using GFP KERNEL, which is prohibited when interrupts are disabled and a raw spinlock is held.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.