CVE-2026-93054

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the UIO (Userspace I/O) subsystem where a stale pointer is maintained during a failed registration path. After the device add() function is called, the UIO device becomes visible to userspace, allowing /dev/uioX to be opened. If a subsequent setup step fails, the uio register device() function unwinds the device but fails to clear the idev->info pointer, which points to the caller-owned struct uio info. This creates a race condition where a process opening the file may hold a reference to the uio device while the caller frees the struct uio info due to the registration failure. Subsequent file operations may then dereference this freed memory, leading to potential system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.