CVE-2026-90191

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the riscv-sbi-mpxy mailbox component where the SBI return value, which determines the number of bytes copied from shared memory into the RPMI notification buffer, is not validated against the negotiated shared-memory size. Additionally, the event walker utilizes a reversed loop condition, potentially allowing the inspection of short event records.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.