Unchecked Return Value in Linux kernel - CVE-2026-90406

Vulnerability details

The vulnerability allows a local user to cause a runtime power-management reference imbalance.

The vulnerability exists due to unchecked return values in iris_core_deinit() when runtime power-management resume fails during core deinitialization. A local user can trigger core deinitialization while runtime power-management resume fails to cause a runtime power-management reference imbalance.

Affected software

How to mitigate CVE-2026-90406

External References

• https://git.kernel.org/stable/c/75d79879ec3cbfd288144b0ae4c3e3fa7700c5fc
• https://git.kernel.org/stable/c/cb83cfff8dff5d546fadce15596e01b1504b632a
• https://git.kernel.org/stable/c/e7768f3dae9f2c6e5b80e9c02429550ea39f2be6

Related Security Bulletins

• Unchecked Return Value in Linux kernel qcom iris driver