CVE-2026-90140

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the cuse module of the Linux kernel. The fuse conn put() function frees the fuse conn using call rcu() asynchronously. If the cuse module is removed via rmmod before the RCU grace period ends, the callback cuse fc release() may attempt to execute from memory that has already been freed and unmapped by vfree(). This can lead to a page-fault Oops or the execution of unrelated code if the virtual address is reused, resulting in undefined behavior.

Recommendations Call rcu barrier() in the cuse exit() function to ensure all pending fuse conn release callbacks are completed before the module is removed.