Linux Distros Unpatched Vulnerability : CVE-2026-90277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/md-llbitmap: prevent create failure bitmap UAF llbitmapcreate publishes mddev-bitmap before reading the bitmap superblock. This is needed because...

CVE-2026-90277

CVE-2026-90277 is a Use-After-Free (UAF) in the Linux kernel's md/md-llbitmap component. When llbitmap_create() fails during bitmap superblock read, the old cleanup path freed the llbitmap structure before clearing mddev->bitmap. Readers relying on bitmap_info.mutex (such as /proc/mdstat ) cou...

PT-2026-94625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the md/md-llbitmap component. The llbitmap create function publishes mddev-bitmap before reading the bitmap superblock. If the llbitmap read sb...