CVE-2026-90316: drm/omap: dsi: Do not copy isr table

Published Sep 17, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/omap: dsi: Do not copy isr table

To be able to unregister stuff from isrs, the corresponding table was copied. Nobody seems to unregister stuff that way, so it does not help. But there are stack-allocated objects passed to these isrs giving chances of UAF of these objects if irqs are unregistered while they are handled, so better do not copy that table.

Affected Software

1 affected component

Linux Linux kernel

Event History

Sep 17, 2026

CVE Published

via MITRE·04:08 PM

Data Sourced

via MITRE·04:08 PM

Description

Frequently Asked Questions

What conditions are required for this issue to occur?

The issue involves stack-allocated objects passed to DSI interrupt handlers and a race where interrupts are unregistered while those handlers are being processed. This can create a use-after-free condition.

Which systems are in scope?

The affected software is the Linux kernel, specifically the drm/omap DSI code path. The provided information does not identify particular kernel versions, hardware models, or default configurations.

What change resolves the issue?

The fix avoids copying the ISR table. The description states that copying the table was unnecessary for unregistering handlers and could leave interrupt handlers referencing stack-allocated objects.