CVE-2026-90334

CVE-2026-90334 is a use-after-free vulnerability in the Linux kernel TTY subsystem. In tty_cdev_add() , when cdev_add() fails, the function drops the cdev reference but leaves driver->cdevs[index] pointing to freed memory. Later, tty_unregister_device() passes that stale pointer to cdev_del() ...