CVE-2026-90229

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the nvme-apple driver where the admin queue, allocated via blk mq alloc queue(), is not properly destroyed during removal. When the controller fails to initialize and is immediately torn down, nvme free ctrl() only drops the last reference without executing blk mq exit queue() or blk sync queue(). This leaves the timeout timer and work armed on a queue that is about to be freed, leading to a kernel NULL pointer dereference and system panic within the blk mq timeout work() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.