{"id":"CVE-2026-90158","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nm68k: nfcon: Do not call console_is_registered() in nfcon_device()\n\nSince 7c2af0f634f1 (\"tty: tty_io: use console_list_lock for list\nsynchronization\") show_cons_active(…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nm68k: nfcon: Do not call console_is_registered() in nfcon_device()\n\nSince 7c2af0f634f1 (\"tty: tty_io: use console_list_lock for list\nsynchronization\") show_cons_active(…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 7c2af0f634f1bc761ca827310dc7e8e586af502f < 7d3f15a664d115584fc177b5f2cfbdb3e5a50d60","Linux >= 7c2af0f634f1bc761ca827310dc7e8e586af502f < e5e11274b5512e24a346ed83f8dd85e3389d2f4b","Linux >= 7c2af0f634f1bc761ca827310dc7e8e586af502f < be98f92fc244688a6bdecbc834cf2cd243056d9d","Linux >= 7c2af0f634f1bc761ca827310dc7e8e586af502f < d73441232f1f067eb659e94447b1353c16609711","Linux >= 7c2af0f634f1bc761ca827310dc7e8e586af502f < 2f8e3cad53b5c36ab0ed5d3195bfc55c59ea61a5","Linux 6.2"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:17:08.963","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90158","references":[{"url":"https://git.kernel.org/stable/c/2f8e3cad53b5c36ab0ed5d3195bfc55c59ea61a5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7d3f15a664d115584fc177b5f2cfbdb3e5a50d60","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/be98f92fc244688a6bdecbc834cf2cd243056d9d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d73441232f1f067eb659e94447b1353c16609711","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e5e11274b5512e24a346ed83f8dd85e3389d2f4b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.873Z","epss":0.002,"epssPercentile":0.10129,"slug":"CVE-2026-90158","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nm68k: nfcon: Do not call console_is_registered() in nfcon_device()\n\nSince 7c2af0f634f1 (\"tty: tty_io: use console_list_lock for list\nsynchronization\") show_cons_active() calls the .device() method under\nthe console_list_lock, but console_is_registered() tries to acquire\nconsole_list_lock as well, causing a deadlock.  It should not be\nnecessary to check console_is_registered() here since the function\nshould not be called in the fist place when the console is not\nregistered.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}