CVE-2026-90002

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free bug exists in the ftrace component. When the trace instance files set ftrace filter and set ftrace notrace are opened, a race condition occurs where the system attempts to use ftrace ops from the inode->private pointer to reference the trace array. If a directory removal (rmdir) of the instance occurs simultaneously with the opening of the set ftrace filter file, the ftrace ops may be freed, leading to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.