CVE-2026-90334

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the tty subsystem. The tty cdev add() function drops the cdev reference when cdev add() fails, but fails to clear the driver->cdevs[index] pointer, leaving it pointing to freed memory. Subsequently, tty unregister device() passes this stale pointer to cdev del(), leading to a use-after-free condition. Use-after-free is a scenario where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.