CVE-2026-90296

A flaw was found in the Linux kernel's cpufreq: imx6q driver. This vulnerability involves improper management of device resources when the driver is reloaded or re-initialized. Repeated reloads can lead to a continuous accumulation of memory, which is not properly released. This memory leak could...

CVE-2026-90296

CVE-2026-90296 affects the Linux kernel's cpufreq/imx6q driver. The root cause is a devres allocation leak : imx6_soc_volt was allocated via devm_kcalloc() against the CPU device (get_cpu_device(0)), which is never unbound, so its devres list is never freed. Each driver rebind (probe) therefore a...

PT-2026-94643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the cpufreq imx6q component. The issue occurs when the driver is probed more than once; specifically, when a second bind occurs after an unbind. The imx6...

CVE-2026-90295: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix out-of-bounds write when probed more than once imx6socvolt is allocated fresh on every probe, sized to the number of ARM OPPs: imx6socvolt = devmkcalloccpudev, num, sizeofimx6socvolt, GFPKERNEL; but it is fill...