← Back to CVE List
CVE-2026-90120NVD
Vulnerability Summary
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
In gic_acpi_parse_iaffid() a given MADT GICC entry might not correspond
to a logical cpu recognized by the kernel, resulting in the cpu variable
initialization to an error value.
Currently, the get_logical_index() return value is not checked for failure,
which might result in out-of-bounds memory corruption while trying to
index a per_cpu variable array.
Add a check to evaluate get_logical_index() return value.
irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
In gic_acpi_parse_iaffid() a given MADT GICC entry might not correspond
to a logical cpu recognized by the kernel, resulting in the cpu variable
initialization to an error value.
Currently, the get_logical_index() return value is not checked for failure,
which might result in out-of-bounds memory corruption while trying to
index a per_cpu variable array.
Add a check to evaluate get_logical_index() return value.
CVSS v3.1 Base Metrics — Score 8.4 (HIGH)
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Linux Linux >= 35866efa52feaf48cc54a0745851a555654e1446 and < 6caeb878f809bdf0aec2fdd96f3d41ef4b69fc69
- Linux Linux >= 35866efa52feaf48cc54a0745851a555654e1446 and < 328affc639ce9873a7a0a3fd6b8339f19767529b
- Linux Linux >= 7.0
- Linux Linux 6caeb878f809bdf0aec2fdd96f3d41ef4b69fc69
- Linux Linux 328affc639ce9873a7a0a3fd6b8339f19767529b