Use-after-free in Linux kernel - CVE-2026-90291

Vulnerability details

The vulnerability allows a local user to trigger a use-after-free condition.

The vulnerability exists due to improper lifetime management in the kmod dups code when duplicate module requests retain a kmod_dup_req instance across a blocking wait. A local user can issue duplicate module requests while another request is waiting for modprobe completion to trigger a use-after-free condition.

Affected software

How to mitigate CVE-2026-90291

External References

• https://git.kernel.org/stable/c/2c85e0fb528e039aa8ea1e9c2a1f64347f990541
• https://git.kernel.org/stable/c/5eecb11b543f9f417bcf0dea239ff99c6af65dbd
• https://git.kernel.org/stable/c/b2709aad7599f6fd957939b60f4a8323c8f08072
• https://git.kernel.org/stable/c/cd2396fc9684d2cfd3f3c3f09c79d6d9d725b0ca

Related Security Bulletins

• Use-after-free in Linux kernel module