CVE-2026-90135net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys/kernel/debug/ref_tracker/* causes use-afer-free crash when either alloc_percpu() or dev_addr_init() in alloc_netdev_mqs() failed, for commit 4d92b95ff2f9 ("net: add net device refcount tracker infrastructure") added ref_tracker_dir_exit() to only free_netdev() path.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d before 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4c; from 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d before 5fe03b5257095e2beef0bc79e1f068fbd09a24c7; from 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d before 63ab05e8f9654aa100d366c0236399fda6ffaab1; 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d builds before 0b1c2af8a22c35cb099c735c2f63ea3ba757557d | CNA record |
References
- https://git.kernel.org/stable/c/2775bf36be7872834a7f8c0a0d9681a1a3e1cd4c
- https://git.kernel.org/stable/c/5fe03b5257095e2beef0bc79e1f068fbd09a24c7
- https://git.kernel.org/stable/c/63ab05e8f9654aa100d366c0236399fda6ffaab1
- https://git.kernel.org/stable/c/0b1c2af8a22c35cb099c735c2f63ea3ba757557d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.