CVE-2026-90135

net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()

sashiko is reporting that trying to read /sys/kernel/debug/ref_tracker/* causes use-afer-free crash when either alloc_percpu() or dev_addr_init() in alloc_netdev_mqs() failed, for commit 4d92b95ff2f9 ("net: add net device refcount tracker infrastructure") added ref_tracker_dir_exit() to only free_netdev() path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before b0859020cab4ea6101478141aeec1b052ed80bddAffected 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 45be87c5195f34c0a51598bc91186f600be5c4c9Affected 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4cAffected 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 5fe03b5257095e2beef0bc79e1f068fbd09a24c7Affected 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 63ab05e8f9654aa100d366c0236399fda6ffaab1Affected 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 0b1c2af8a22c35cb099c735c2f63ea3ba757557dAffected
LinuxLinux	5.17Affected before 5.17Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before b0859020cab4ea6101478141aeec1b052ed80bddAffected
4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 45be87c5195f34c0a51598bc91186f600be5c4c9Affected
4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4cAffected
4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 5fe03b5257095e2beef0bc79e1f068fbd09a24c7Affected
4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 63ab05e8f9654aa100d366c0236399fda6ffaab1Affected
4d92b95ff2f95f13df9bad0b5a25a9f60e72758d to before 0b1c2af8a22c35cb099c735c2f63ea3ba757557dAffected

LinuxLinux

5.17Affected
before 5.17Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.