CVE-2026-90281

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference can occur during early runtime suspend in the snps-femto-v2 PHY driver. This happens because runtime Power Management (PM) callbacks may dereference the hsphy instance before it is fully initialized by phy create(), creating a window where a suspend callback can trigger the crash. Runtime PM is a kernel framework used to manage the power state of devices to save energy when they are idle.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.