CVE-2026-90136

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hsmp hwmon write() function where user-supplied values for the power1 cap file are processed as signed longs. When a negative value is provided, the division by the unsigned long MICROWATT PER MILLIWATT results in a very large unsigned value being stored in the msg.args[0] variable. This causes an incorrect, multi-gigawatt socket power limit to be sent to the System Management Unit (SMU) via the HSMP SET SOCKET POWER LIMIT command instead of the input being rejected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.