CVE-2026-90334
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops the cdev reference when cdev_add() fails, but leaves driver->cdevs[index] pointing to freed memory. tty_unregister_device() later passes that stale pointer to cdev_del(), causing a use-after-free. Clear the slot after dropping the reference.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linuxfb1de260033c215dba438973d82b48562bdc86bb, e9e64dd02fd68776afda00777591eca0c3984285, 33a44333a9dfda044b0e233399b12ead7f8a90ae, d331c63570af61ef7aaf516b64a8d6f47518a3a4, a83fcddf3c75d004f12aa13555bb73da19fb75a9, 4f6bd79bb7e55095f09bec9b4eb6c09df1306116, 5c5a795bf6248fe96f96dd9fd79d66bbb4a92077, 6645856f0df3aeecd45519cb611415b4b89c2223 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < fb1de260033c215dba438973d82b48562bdc86bb, c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < e9e64dd02fd68776afda00777591eca0c3984285, c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < 33a44333a9dfda044b0e233399b12ead7f8a90ae, c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < d331c63570af61ef7aaf516b64a8d6f47518a3a4, c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < a83fcddf3c75d004f12aa13555bb73da19fb75a9, c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < 4f6bd79bb7e55095f09bec9b4eb6c09df1306116, c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < 5c5a795bf6248fe96f96dd9fd79d66bbb4a92077, c1a752ba2d6b8a52879c7ab637cff38359ea9827 ≤ v < 6645856f0df3aeecd45519cb611415b4b89c2223, 4.3 | fb1de260033c215dba438973d82b48562bdc86bb, e9e64dd02fd68776afda00777591eca0c3984285, 33a44333a9dfda044b0e233399b12ead7f8a90ae, d331c63570af61ef7aaf516b64a8d6f47518a3a4, a83fcddf3c75d004f12aa13555bb73da19fb75a9, 4f6bd79bb7e55095f09bec9b4eb6c09df1306116, 5c5a795bf6248fe96f96dd9fd79d66bbb4a92077, 6645856f0df3aeecd45519cb611415b4b89c2223 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.