CVE-2026-90045

CVE-2026-90045 is a use-after-free vulnerability in the Linux kernel 's USB gadget FunctionFS (ffs) driver. The io_data structure stores a pointer to the submitting task's mm_struct but fails to hold a reference while asynchronous requests remain pending. If the task exits before completion handl...