CVE-2026-90135

A flaw was found in the Linux kernel. A local user attempting to read from /sys/kernel/debug/reftracker/ could trigger a use-after-free vulnerability. This occurs due to a missing exit function call in allocnetdevmqs when certain memory allocation or device initialization operations fail...

SUSE CVE-2026-90135

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

Linux Distros Unpatched Vulnerability : CVE-2026-90135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when eith...

AZL-102833 CVE-2026-90135 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

DEBIAN-CVE-2026-90135

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

CVE-2026-90135

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

CVE-2026-90135 net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

CVE-2026-90135 net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

EUVD-2026-81728

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

CVE-2026-90135

CVE-2026-90135 affects the Linux kernel net subsystem. The vulnerability is a use-after-free crash triggered when reading /sys/kernel/debug/ref_tracker/* after a failure in alloc_percpu() or dev_addr_init() within alloc_netdev_mqs(). The root cause is that commit 4d92b95ff2f9, which introduced ne...

CVE-2026-90135: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: add missing reftrackerdirexit to allocnetdevmqs sashiko is reporting that trying to read /sys/kernel/debug/reftracker/ causes use-afer-free crash when either allocpercpu or devaddrinit in allocnetdevmqs failed, for commit...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.17. It stems from the absence of a call to reftrackerdirexit in allocnetdevmqs. When allocpercpu or devaddrinit fail, reading from /sys/kernel/debug/reftracker/ can lead to use-after-free crashes...