CVE-2026-90232

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc5

Description An issue exists in the AMT (Advanced Memory Transport) module where cross-network namespace (netns) setup is unintentionally supported. When a lower device is unregistered, the amt device event() function attempts to unregister its corresponding upper AMT device. However, the amt lookup upper dev() function only searches for the upper device within the lower device's own network namespace. If an AMT device is created on a lower device located in a different network namespace, removing the lower device causes the system to hang and triggers a kernel warning during the unregistration process.

Recommendations Update the Linux kernel to version 7.2.0-rc5 or later to forbid cross-network namespace setup in the AMT module.