Device Management Issue in Linux Kernel Affecting IMX Products

CVE-2026-98904

What is CVE-2026-98904?

A vulnerability in the Linux kernel related to device management in IMX products has been identified. The issue arises when early usage of the device occurs before the probe is complete, which can lead to improper handling in error scenarios. This vulnerability can potentially disrupt the device operation, as it requires the proper handling of pm_runtime_enable() and the sequencing of device registration. Mitigation involves adjusting the initialization order, ensuring that device management is securely handled with devm_pm_runtime_enable() and postponing the enabling of runtime to the removal path for improved stability and security.

References