CVE-2026-90295

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the cpufreq imx6q component. The issue occurs when the driver is probed more than once; specifically, when a second bind occurs after an unbind. The imx6 soc volt array is allocated fresh during every probe, but it is populated using soc opp count, which uses static storage and is never reset. Consequently, the indexing continues from where the previous operation stopped, leading to a write operation that exceeds the boundaries of the newly allocated array. This was observed as a slab-out-of-bounds write in the imx6q cpufreq probe() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.