CVE-2026-90274

According to IHI006H Embedded Trace Macrocell Architecture Specification[0], TRCSEQEVR is implemented only when TRCIDR5.NUMSEQSTATE is 0b100, in which case n ranges from 0 to 2; otherwise, TRCIDR5.NUMSEQSTATE is 0b000.

IOW, the number of usage in the initialisation or setting TRCSEQEVR with drvdata->nrseqstate - 1 in the loop could make underflow issue when TRCIDR5.NUMSEQSTATE is 0b000.

Therefore, introduce nr_seq_ctrls field and untie it from nrseqstate. As part of this introduce ETM_MAX_SEQ_TRANSITIONS macro and apply nr_seq_ctrls and above macro to TRCSEQEVR relevant fields setup.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90274.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

2e1cdfe184b5202d51e0611d7a051e2bea303946

Fixed

8d669db59f7283b838e029af29da12e505265fae

Fixed

4091f2d5b26d117c992ffcce1a5df425a0daedcd

Fixed

be7b2de5b9a96ae68ffa3528e0a40d63e0fd8148

Fixed

4f9a0f548413bf864f609c9f4bc56e3f1b3577d4

Fixed

1ade9a335c69fc735cb7b3f222ed35ab135540fb

Fixed

5ac900f73ce1d4d8308f40752b51bc8a02b244d2

Fixed

1674d9bff8073bdee5dbc200f56fc3caa28d0566

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90274.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.2.0

Fixed

5.15.221

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.1.188

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.157

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.110

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.52

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.2.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90274.json"