CVE-2026-90055

This vulnerability affects the Linux kernel 's usbatm driver (USB ATM). The root cause is in usbatm_atm_init(), which sets ci_range.vpi_bits and ci_range.vci_bits to ATM_CI_MAX (−1), a sentinel value intended for userspace ATM_SETCIRANGE requests rather than a valid bit count. These fields are us...