CVE-2026-90296

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cpufreq imx6q driver where imx6 soc volt is allocated using devm kcalloc() against the CPU device obtained from get cpu device(0). Because this CPU device is never unbound, the associated devres (device resource) list is never released, and the imx6q cpufreq remove() function fails to free the array. Consequently, every driver probe creates a memory allocation that persists for the entire system lifetime, leading to resource accumulation during driver rebinding.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.