CVE-2026-90188

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the null blk driver when shared tags is enabled. The null setup tagset() function allocates a global tag set using null init global tag set(). If device creation subsequently fails, the err dev path destroys default devices and calls unregister blkdev(), but fails to free the global tag set. Because the module initialization fails, the null exit() function is not called, resulting in the permanent leak of the global tag set's tags and maps.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.