CVE-2026-90113

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free read occurs in the netdevsim component when a queue reset is performed, such as via queue reset debugfs. The nsim queue start() function replaces the receive queue nsim rq with a new allocation but fails to update the queue-to-NAPI mapping using netif queue set napi(). Consequently, the system continues to reference the old NAPI structure after it has been freed. This leads to a memory access error in the nla put napi id() function when accessing rxq->napi->napi id during a queue dump via Netlink using the NETDEV CMD QUEUE GET command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.