SUSE CVE-2026-90397

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix NULL dereference in IRQ handler before scm is published In qcomscmprobe, devmrequestthreadedirq is called before smpstorerelease&scm, scm. Two paths can dereference scm before it is published, both causin...

CVE-2026-90397

CVE-2026-90397 affects the Qualcomm SCM (Secure Channel Manager) driver in the Linux kernel . The root cause is a race condition in qcom_scm_probe(): devm_request_threaded_irq() is called before __scm is published via smp_store_release(), allowing two code paths (the IRQ handler and non-atomic SM...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.3 contains security vulnerabilities. These vulnerabilities stem from the call to devmrequestthreadedirq before scm is released in qcomscmprobe. Additionally, the IRQ handler and the wait completion path dereferenced that pointer before scm was released, which may lead t...