CVE-2026-90144

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the dpll device ops() function during a teardown race condition. This happens when the last owner of a dpll device unregisters while another driver still holds a pin via dpll pin on pin register(), leaving the dpll object with an empty registration list. If a pin notification was queued before the unregister process, the system attempts to access the missing registration through pin->dpll refs, leading to a kernel crash. The issue is further triggered in functions such as dpll cmd pin get one(), dpll msg add pin dplls(), and dpll pin register() when they dereference device operations without proper validation of the registration state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.