CVE-2026-90135
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys/kernel/debug/ref_tracker/* causes use-afer-free crash when either alloc_percpu() or dev_addr_init() in alloc_netdev_mqs() failed, for commit 4d92b95ff2f9 ("net: add net device refcount tracker infrastructure") added ref_tracker_dir_exit() to only free_netdev() path.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linuxb0859020cab4ea6101478141aeec1b052ed80bdd, 45be87c5195f34c0a51598bc91186f600be5c4c9, 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4c, 5fe03b5257095e2beef0bc79e1f068fbd09a24c7, 63ab05e8f9654aa100d366c0236399fda6ffaab1, 0b1c2af8a22c35cb099c735c2f63ea3ba757557d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d ≤ v < b0859020cab4ea6101478141aeec1b052ed80bdd, 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d ≤ v < 45be87c5195f34c0a51598bc91186f600be5c4c9, 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d ≤ v < 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4c, 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d ≤ v < 5fe03b5257095e2beef0bc79e1f068fbd09a24c7, 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d ≤ v < 63ab05e8f9654aa100d366c0236399fda6ffaab1, 4d92b95ff2f95f13df9bad0b5a25a9f60e72758d ≤ v < 0b1c2af8a22c35cb099c735c2f63ea3ba757557d, 5.17 | b0859020cab4ea6101478141aeec1b052ed80bdd, 45be87c5195f34c0a51598bc91186f600be5c4c9, 2775bf36be7872834a7f8c0a0d9681a1a3e1cd4c, 5fe03b5257095e2beef0bc79e1f068fbd09a24c7, 63ab05e8f9654aa100d366c0236399fda6ffaab1, 0b1c2af8a22c35cb099c735c2f63ea3ba757557d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.