CVE-2026-90341

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the coreboot firmware handling where coreboot table probe() replaces the platform resource length with header and table sizes provided by the firmware before mapping the full table. A malformed table can cause a 32-bit size addition overflow or advertise an extent beyond the resource, leading the driver to map and parse memory outside the intended resource. Additionally, resources shorter than the fixed header may be mapped as if they contained a complete header.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.