CVE intelligence

CVE-2026-90406

Vulnerability intelligence

Published Sep 17, 2026Sources checked Nov 3, 2026

N/ACVSS not listedScore unavailable

What this means

Review the available evidence

CVE-2026-90406. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

CISA KEVNot listedBased on the latest collected catalog

EPSS0.2%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-90406?

In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: handle runtime PM resume failure in core deinit

Check the return value of pm_runtime_resume_and_get() in iris_core_deinit().

If runtime PM resume fails, skip hardware power-off operations but still perform software teardown and state transition. Also skip the corresponding pm_runtime_put_sync() call to avoid unbalanced runtime PM references.

Source: NVD