Strix
64.1K

CVE-2026-90135

Unknown

Last modified

CVE-2026-90135 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys/kernel/debug/ref_tracker/* causes use-afer-free crash when either alloc_percpu() or dev_addr_init() in alloc_netdev_mqs() failed, for commit 4d92b95ff2f9 ("net: add net device refcount tracker infrastructure") added ref_tracker_dir_exit() to only free_netdev() path..

Description

In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys/kernel/debug/ref_tracker/* causes use-afer-free crash when either alloc_percpu() or dev_addr_init() in alloc_netdev_mqs() failed, for commit 4d92b95ff2f9 ("net: add net device refcount tracker infrastructure") added ref_tracker_dir_exit() to only free_netdev() path.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d, < 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4c; >= 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d, < 5fe03b5257095e2beef0bc79e1f068fbd09a24c7; >= 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d, < 63ab05e8f9654aa100d366c0236399fda6ffaab1; >= 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d, < 0b1c2af8a22c35cb099c735c2f63ea3ba757557d
LinuxLinux5.17

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-90135?
In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys/kernel/debug/ref_tracker/* causes use-afer-free crash when either alloc_percpu() or dev_addr_init() in alloc_netdev_mqs() failed, for commit 4d92b95ff2f9 ("net: add net device refcount tracker infrastructure") added ref_tracker_dir_exit() to only free_netdev() path.
How severe is CVE-2026-90135?
Severity scoring for CVE-2026-90135 is pending analysis.
How do I fix CVE-2026-90135?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-90135?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST