CVE-2026-90130

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vdpa sim component where the vdpasim create() function leaves vdpasim->worker as an ERR PTR (an error pointer) if kthread run worker() fails. The subsequent error path drops the device reference, releasing the partially initialized simulator. Because vdpasim free() unconditionally passes the worker pointer to kthread destroy worker(), the ERR PTR is dereferenced, which can trigger a general protection fault (a type of system crash occurring when the CPU detects a memory access violation).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.