CVE-2026-90192 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 qcom-cpucp qcom_cpucp_mbox_send_data null pointer dereference

A vulnerability was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. It has been declared as critical. This vulnerability affects the function qcom_cpucp_mbox_send_data of the component qcom-cpucp. Such manipulation leads to null pointer dereference.

This vulnerability is documented as CVE-2026-90192. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More