CVE-2026-90274
kernel: coresight: etm4x: fix underflow for usage of (nrseqstate - 1)
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 15, 2026
Description
A flaw was found in the Linux kernel's CoreSight ETM4 (Embedded Trace Macrocell) driver. A local user could cause a denial of service (DoS) by triggering an integer underflow during the initialization or configuration of trace sequence event registers. When trace sequence states are not implemented by the hardware, this calculation error can lead to memory corruption or an uncontrolled loop, resulting in a system crash.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-191 · Integer Underflow (Wrap or Wraparound)