CVE-2026-93827

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the virtio-fs component. The virtio fs setup vqs() function allocates fs->vqs and fs->mq map before calling virtio find vqs(). If virtio find vqs() fails, the error path frees both pointers and returns an error to virtio fs probe(). Subsequently, virtio fs probe() drops the last kobject reference, leading virtio fs ktype release() to free fs->vqs and fs->mq map a second time. This creates dangling pointers in struct virtio fs and can be triggered when a broken virtio-fs device advertises more request queues than the transport provides.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.