Linux Distros Unpatched Vulnerability : CVE-2026-90158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 tty: ttyio: use consolelistlock for list synchronization showconsactive calls the...

AZL-102012 CVE-2026-90158 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...

CVE-2026-90158 m68k: nfcon: Do not call console_is_registered() in nfcon_device()

In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call consoleisregistered in nfcondevice Since 7c2af0f634f1 "tty: ttyio: use consolelistlock for list synchronization" showconsactive calls the .device method under the consolelistlock, but consoleisregistered...

CVE-2026-90158

CVE-2026-90158 affects the Linux kernel 's m68k nfcon (Novell Netware console) driver. Since commit 7c2af0f634f1, show_cons_active() invokes the .device() callback while holding console_list_lock, yet nfcon_device() calls console_is_registered(), which attempts to acquire the same lock—causing a ...