CVE-2026-89643

A use-after-free vulnerability exists in the Linux kernel's audit subsystem . The function audit_del_rule() unconditionally calls audit_put_tree() at its end, assuming it always handles a temporary parser-owned tree reference. However, when invoked via fsnotify autoremove for mixed AUDIT_DIR + AU...