CVE-2026-90129

A flaw was found in the virtio_balloon component of the Linux kernel. During device shutdown, the virtio_balloon component fails to properly stop its asynchronous operations. This can lead to a system crash (kernel panic) if the panic_on_warn setting is enabled, or cause the system to become unresponsive and block indefinitely during reboot or kexec operations. This vulnerability can result in a denial of service, preventing the system from restarting correctly.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.