CVE-2026-90194

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ACPI scan component where the rollback path during device add() failures does not properly clean up bus-ID bookkeeping. Specifically, when device add() fails after acpi device set name() has allocated an instance ID and a new acpi device bus id has been linked into the acpi bus id list, the system only removes the wakeup list and detaches ACPI handle data. This results in the allocated instance number remaining consumed and the bus-ID bookkeeping persisting.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.