CVE-2026-90301

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the OCFS2 heartbeat (o2hb) component of the Linux kernel. The problem occurs because heartbeat regions publish the o2hb region structure as private data for NEGO TIMEOUT and NEGO APPROVE handlers via the make item() function before the heartbeat runtime is fully constructed by dev store(). This allows a peer to interact with region timeout work during the runtime build or teardown phases. Additionally, the o2net unregister handler list() function does not wait for in-flight sc rx work that has already passed o2net handler get(), potentially allowing callbacks or delayed work to outlive the o2hb region structure. This race condition can lead to memory corruption when region release() frees the region while a callback is still active.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.