CVE-2026-90238

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A self-deadlock occurs in the isp4sd pwron and init() function. The function acquires the ops mutex using a guard; however, if an initialization failure occurs, it jumps to an error path that calls isp4sd pwroff and deinit(). Because isp4sd pwroff and deinit() attempts to acquire the same non-recursive ops mutex already held by the current thread, the system deadlocks. This issue can also lead to runtime-PM underflow from pm runtime resume and get() and unauthorized MMIO (Memory-Mapped I/O) access while the device is unpowered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.