CVE-2026-90319

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rapidio component where rio alloc net() stores a newly allocated rio net in mport->net before the device is registered. If rio add net() fails, the device reference is dropped via put device(), releasing the rio net object. However, mport->net continues to point to the freed object, creating a dangling pointer. A subsequent mport unregister process may dereference this pointer and attempt to free the same rio net object again, leading to a double-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.