# regulator: core: use system_freezable_wq for init complete work

CVE record · `CVE-2026-90360`

- **Identifiers:** `CVE-2026-90360`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 17 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:09 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `8b8c8d69b1a31004517d4c71a490f47bdf3405a2 to before 8a2ae3ab348cce44120667277c2198f10cc348b1` (git)
  - affected: `d7ce17fba6c8e316ca9a554a87edddce6f862435 to before 350a0cba90e1bd40b1fe5b396923d2f3a61d1056` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before 2cebc00340a585adeffe321bc41f1937eb79a4dc` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before 9cf65270c1c1717c84dcfacd58a782c1186b0cbf` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before dc8570a5b830190bf0b57017c35aef97cd6ad7d9` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before 6d0a2c5e210f2fba099129e6183ef81316a6ae48` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before 0d23d658d79925076026fff62a49b8c94e0e8922` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before 0b950aa7ec95e120b2bde745ca9a7ed3ce49d528` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before 29dc2e24f6adb36dcb884acf455644c397a67471` (git)
  - affected: `55576cf1853798e86f620766e23b604c9224c19c to before 03eab318cedd6ae34ecd34533cd986edf5237164` (git)
  - affected: `c4f65c2fb0f5c488d4ae606fba94bb98dcf383fd` (git)
  - affected: `d6acb54716ffab29f15c66082bd751410b284764` (git)
  - and 6 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.4`
  - unaffected: `before 5.4` (semver)
  - unaffected: `4.9.207 to 4.9.*, inclusive` (semver)
  - unaffected: `4.14.160 to 4.14.*, inclusive` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.110 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.52 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.6 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0024, the 15th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-90360](https://www.cve.org/CVERecord?id=CVE-2026-90360)
- [NVD: CVE-2026-90360](https://nvd.nist.gov/vuln/detail/CVE-2026-90360)

### References from the CNA

- <https://git.kernel.org/stable/c/8a2ae3ab348cce44120667277c2198f10cc348b1>
- <https://git.kernel.org/stable/c/350a0cba90e1bd40b1fe5b396923d2f3a61d1056>
- <https://git.kernel.org/stable/c/2cebc00340a585adeffe321bc41f1937eb79a4dc>
- <https://git.kernel.org/stable/c/9cf65270c1c1717c84dcfacd58a782c1186b0cbf>
- <https://git.kernel.org/stable/c/dc8570a5b830190bf0b57017c35aef97cd6ad7d9>
- <https://git.kernel.org/stable/c/6d0a2c5e210f2fba099129e6183ef81316a6ae48>
- <https://git.kernel.org/stable/c/0d23d658d79925076026fff62a49b8c94e0e8922>
- <https://git.kernel.org/stable/c/0b950aa7ec95e120b2bde745ca9a7ed3ce49d528>
- <https://git.kernel.org/stable/c/29dc2e24f6adb36dcb884acf455644c397a67471>
- <https://git.kernel.org/stable/c/03eab318cedd6ae34ecd34533cd986edf5237164>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-90360>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-90360/>. Everything for agents: <https://agentprime.io/llms.txt>.