CVE-2026-90216

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ubi init attach() function during module initialization rollback. The process incorrectly assumes that the mtd= parameter index corresponds directly to the UBI device number. When mtd= specifies an explicit ubi num, a successfully attached device may be stored in a higher ubi devices[] slot. Consequently, if a subsequent failure occurs, the rollback mechanism may fail to identify and detach the previously attached device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.