CVE-2026-90045

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the USB gadget functionfs (ffs) component. The io data structure stores a pointer to the mm struct of the submitting task but fails to maintain a reference to it while asynchronous requests are pending. This can lead to a memory corruption scenario if the task exits before the completion handling process finishes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.