Strix
75.4K

CVE-2026-90208

UnknownEPSS 0.21%

Last modified

CVE-2026-90208 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type Samsung PWM timer might be used as a clock source on some legacy systems. When PREEMPT_RT is enabled on ARM, regular spinlock is converted to a sleeping lock (mutex-based), which must not be used in atomic context such as hard interrupt handlers. Switch the samsung_pwm_lock to the raw_spinlock, which remains a true non-sleeping spinlock even under PREEMPT_RT.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type Samsung PWM timer might be used as a clock source on some legacy systems. When PREEMPT_RT is enabled on ARM, regular spinlock is converted to a sleeping lock (mutex-based), which must not be used in atomic context such as hard interrupt handlers. Switch the samsung_pwm_lock to the raw_spinlock, which remains a true non-sleeping spinlock even under PREEMPT_RT.

Metrics

EPSS Probability
0.21%

11.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f11899894c0a683c754ca71b45f7c9c3d35a3a1c, < 9c97311a5f5d388eece66fc415167b38f35fe6a1; >= f11899894c0a683c754ca71b45f7c9c3d35a3a1c, < 8f823b47eb889ea70f4c360164e96453f40e3646; >= f11899894c0a683c754ca71b45f7c9c3d35a3a1c, < 5720fe5cabda19f395d194ca57321c7b85f8af80; >= f11899894c0a683c754ca71b45f7c9c3d35a3a1c, < a25ea67a913f98b8461aff1e9e3a5f6dc2378395; >= f11899894c0a683c754ca71b45f7c9c3d35a3a1c, < 7eb5764d25c4ac7f5d126621660f7219b61fd2fd; >= f11899894c0a683c754ca71b45f7c9c3d35a3a1c, < 3b212f9d70805d91febae01d618868f4860e267c
LinuxLinux3.10

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-90208?
In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type Samsung PWM timer might be used as a clock source on some legacy systems. When PREEMPT_RT is enabled on ARM, regular spinlock is converted to a sleeping lock (mutex-based), which must not be used in atomic context such as hard interrupt handlers. Switch the samsung_pwm_lock to the raw_spinlock, which remains a true non-sleeping spinlock even under PREEMPT_RT.
How severe is CVE-2026-90208?
Severity scoring for CVE-2026-90208 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-90208?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-90208?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST