CVE-2026-72431

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in /proc/allocinfo during module unloading. The allocinfo start() function only reinitializes the codetag iterator at position 0, causing subsequent reads to reuse cached iterator state. Because allocinfo stop() releases the mod lock between read batches, a module can be unloaded and its memory freed while the cached iterator still references it. Consequently, when allocinfo show() is called, it dereferences ct->filename and ct->function within the freed .rodata section of the module memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.