CVE-2026-90410

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SPI davinci driver where the controller is allocated using the non-managed spi alloc host() function while the interrupt is registered via devm request threaded irq(). During the removal process, the controller and its embedded davinci spi devdata are freed before the interrupt handler is drained. This sequence allows a late or latched interrupt to reach the davinci spi irq() function and dereference memory that has already been freed, potentially leading to a system crash or instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.