CVE-2026-90121irqchip/gic-v5: Clear per-CPU IRS data on teardown
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining IRS initialization can fail. The error path then frees the IRS data without clearing that published state, leaving CPUs associated with freed memory. On initialization failure and normal IRS teardown, clear the per-CPU IRS association by removing the stale pointer to irs_data. Also invalidate the per-CPU IAFFID state for any CPUs that were tied to the IRS before it was freed.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5cb1b6dab2def316671ea2565291a86ad58b884c before 0887d41abf76638942688cb0c0ff8087f52e2b33; from 5cb1b6dab2def316671ea2565291a86ad58b884c before 54937af6f4a0d44c2852a203d457902f3264c906; 5cb1b6dab2def316671ea2565291a86ad58b884c builds before 3dfc0ab5fefd052c6028c4632b1fad8bdaf7967e | CNA record |
References
- https://git.kernel.org/stable/c/0887d41abf76638942688cb0c0ff8087f52e2b33
- https://git.kernel.org/stable/c/54937af6f4a0d44c2852a203d457902f3264c906
- https://git.kernel.org/stable/c/3dfc0ab5fefd052c6028c4632b1fad8bdaf7967e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.