High severity8.4NVD Advisory· Published Sep 17, 2026· Updated Oct 19, 2026
CVE-2026-90120
CVE-2026-90120
Description
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
In gic_acpi_parse_iaffid() a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization to an error value.
Currently, the get_logical_index() return value is not checked for failure, which might result in out-of-bounds memory corruption while trying to index a per_cpu variable array.
Add a check to evaluate get_logical_index() return value.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 7.0.0, < 7.2.6+ 1 more
- (no CPE)range: >= 7.0.0, < 7.2.6
- (no CPE)range: < 7.2.7-1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.