CVE-2026-90284

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the firmware loader where fw load sysfs fallback() calls device add() before adding fw priv to pending fw head. This allows a userspace helper to complete the request via the loading attribute before it is queued as pending. Consequently, firmware loading store() may call fw state done() while pending list still points to itself, preventing the removal of the entry from pending fw head. An unconditional list add() then queues a completed fw priv, which can lead to pending fw head retaining a pointer to freed memory, potentially causing a fault during the validation of subsequent fallback requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.