CVE-2026-90404

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cros ec debugfs probe() function where the notifier panic is registered with the EC panic notifier chain, but the remove path fails to unregister it before tearing down the debugfs and console log. This can lead to a situation where a subsequent panic notification calls back into a removed instance, queuing work that accesses released data, potentially causing a system crash or memory corruption.

Recommendations Unregister the panic notifier before tearing down the debugfs and console log state.