Get real-time updates on Telegram
CVE-2026-90137: Linux 6.6
CVE-2026-90137. CVSS 3.1 base score 7.7 (HIGH, Source advisory). EPSS 0.0018 (percentile 0.07089), scored 17-Oct-2026.
Affected technology
Linux · 8646a3b5ee3a5b384a22a721f37c24274d974045 to before c224759555a13735b0d67561d818cefe00c3309a, 8646a3b5ee3a5b384a22a721f37c24274d974045 to before 59fe8491ddaa03a510b352552e6ee291e7ce45d3, 8646a3b5ee3a5b384a22a721f37c24274d974045 to before ace1ba5fca0ab775b3641e154bcbc3ccde26a71a, 8646a3b5ee3a5b384a22a721f37c24274d974045 to before 8a7499b8fd34438c1b11964e0e7ef5bd590fec92, 8646a3b5ee3a5b384a22a721f37c24274d974045 to before e213939ed9e6e6badf7aa48c4c8dd9a9cdf00615
Linux
Linux · 6.6
Linux
Component: Not specified by the source
File: drivers/platform/x86/hp/hp-bioscfg/passwdobj-attributes.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 30.8 /100 (P4)
- CVSS 3.1
- 7.7 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · Source advisory
- EPSS
- 0.0018 · percentile 0.07089 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-90137.html