CVE-2026-90431

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the remoteproc component due to a lack of synchronization between the rproc crash handler work() function and the rproc del() function. This allows a driver to be removed while crash-handler work is either scheduled or executing. To address this, a deleting flag was introduced to prevent races with reporting and ensure that scheduled work is cancelled and synchronized before removal proceeds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.