Bug 2536751 (CVE-2026-90364) - CVE-2026-90364 kernel: ACPI: processor: Unregister cpufreq notifier on init failure
Summary: CVE-2026-90364 kernel: ACPI: processor: Unregister cpufreq notifier on init f...
Keywords:
Status: NEW
Alias: CVE-2026-90364
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-17 19:25 UTC by OSIDB Bzimport
Modified: 2026-10-05 13:34 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-17 19:25:26 UTC
In the Linux kernel, the following vulnerability has been resolved:

ACPI: processor: Unregister cpufreq notifier on init failure

acpi_processor_driver_init() registers the cpufreq policy notifier before
registering the ACPI processor driver and setting up CPU hotplug state.

If driver_register() or cpuhp_setup_state() fails, the error path only
unregisters the ACPI processor driver and the idle driver. The cpufreq
notifier remains registered even though initialization failed.

Mirror the module exit path on the init failure path and unregister the
cpufreq notifier when it has been registered.


Note You need to log in before you can comment on or make changes to this bug.