CVE-2026-90336

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the serial core where the uart register driver() function fails to clear pointers when errors occur. Specifically, if tty alloc driver() fails, drv->state continues to point to freed memory. Similarly, if tty register driver() fails, drv->tty driver retains a pointer after its reference is dropped. Drivers using drv->state as a flag to check if registration has already occurred may skip registration during a subsequent probe and pass the freed state to the uart add one port() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.