« Volver al listado

CVE-2026-90297

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

drm/sun4i: crtc: Propagate layer initialization error

sun4i_crtc_init() returns plain NULL when layer initialization fails, while all its other error paths return an error pointer. The only caller, sun4i_tcon_bind(), checks the result with IS_ERR() and happily continues with tcon->crtc set to NULL. sun4i_rgb_init() and sun4i_lvds_init() then dereference it in drm_crtc_mask(), which oopses.

Return the error pointer instead.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-90297",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "aaf812960fb5ade24be7a1d8fea27a1ffc458c30",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "e216d6168f25a69e5ae5b981ee73b3a860a46441",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "2bb3169788f8296c8fc1e0d4fa6f1c6367cd5829",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "1882112124a642de7571fbf354fa1929decbb3ef",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "8f32af44d43332c02198752e596df00659bf4354",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "65bc02fec98e4e1d7d59d86cf2ddf8fd73dacb89",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "c0d3219ffd4c0d42295e0dc949856067b7818b71",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dcd215801b0279f0a021516526cf7c0b67d5302e",
              "lessThan": "7061ff05ed4a3cf16e83f7e3ad09cbd212508a32",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/gpu/drm/sun4i/sun4i_crtc.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.12"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.12",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/gpu/drm/sun4i/sun4i_crtc.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-17T17:17:27.137",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/1882112124a642de7571fbf354fa1929decbb3ef",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/2bb3169788f8296c8fc1e0d4fa6f1c6367cd5829",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/65bc02fec98e4e1d7d59d86cf2ddf8fd73dacb89",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/7061ff05ed4a3cf16e83f7e3ad09cbd212508a32",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8f32af44d43332c02198752e596df00659bf4354",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/aaf812960fb5ade24be7a1d8fea27a1ffc458c30",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c0d3219ffd4c0d42295e0dc949856067b7818b71",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e216d6168f25a69e5ae5b981ee73b3a860a46441",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sun4i: crtc: Propagate layer initialization error\n\nsun4i_crtc_init() returns plain NULL when layer initialization fails,\nwhile all its other error paths return an error pointer. The only\ncaller, sun4i_tcon_bind(), checks the result with IS_ERR() and happily\ncontinues with tcon->crtc set to NULL. sun4i_rgb_init() and\nsun4i_lvds_init() then dereference it in drm_crtc_mask(), which\noopses.\n\nReturn the error pointer instead."
    }
  ],
  "lastModified": "2026-09-17T17:17:27.137",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}