Linux Distros Unpatched Vulnerability : CVE-2026-90277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/md-llbitmap: prevent create failure bitmap UAF llbitmapcreate publishes mddev-bitmap before reading the bitmap superblock. This is needed because...

CVE-2026-90277

CVE-2026-90277 is a Use-After-Free (UAF) in the Linux kernel's md/md-llbitmap component. When llbitmap_create() fails during bitmap superblock read, the old cleanup path freed the llbitmap structure before clearing mddev->bitmap. Readers relying on bitmap_info.mutex (such as /proc/mdstat ) cou...