CVE-2026-90404 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 cros_ec_debugfs use after free

September 17, 2026 Yanac

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. This issue affects some unknown processing of the component cros_ec_debugfs. Executing a manipulation can lead to use after free.

This vulnerability is registered as CVE-2026-90404. The attack needs to be launched locally. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More