Use-after-free in Linux kernel - CVE-2026-90151
Published: September 19, 2026
Vulnerability identifier: #VU151326
CSH Severity: Low
CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-90151
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to trigger a use-after-free.
The vulnerability exists due to a use-after-free in the NFSv4 callback identifier IDR when an NFSv4.0 callback lookup occurs after a client allocation failure. A remote attacker can trigger an NFSv4.0 callback lookup using the stale callback identifier to trigger a use-after-free.
Exploitation requires an NFSv4.0 client allocation to fail after a callback identifier has been allocated.
Affected software
Linux kernel
How to mitigate CVE-2026-90151
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/3f2387e8bfbc4efda5d77c3a11a028d0a119c48f
- https://git.kernel.org/stable/c/5891c03e150920618db0e9c4ea2d772abacdcfd1
- https://git.kernel.org/stable/c/68c721391b761dbe38d5b0094d2bb6e8489ad92b
- https://git.kernel.org/stable/c/7c4812eb96bdcafb31a65b12f2aa96659429d1d4
- https://git.kernel.org/stable/c/80b1c3d5a881f7d9081aa9f46da9742878a0f893
- https://git.kernel.org/stable/c/9bfdd0f591307b5198826a0e7a5b2f35f87acd2d
- https://git.kernel.org/stable/c/d05c2007b3d84ccba11dc6e9cb3202768cc72f14
- https://git.kernel.org/stable/c/fc95ca82d5ae598c428ab5a00ae69f8526d59371