PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-90431 Linux CVE debrief

A use-after-free vulnerability exists in the Linux kernel's remoteproc subsystem. The issue arises from a race condition between the crash handling mechanism and the rproc_del() function, which can lead to use-after-free issues. To mitigate this, a 'deleting' flag is introduced to synchronize the scheduled work and prevent crashes from entering the crash-handling path during the shutdown process.

Vendor
Linux
Product
Unknown
CVSS
Unknown
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-17
Original CVE updated
2026-10-19
Advisory published
2026-09-17
Advisory updated
2026-10-19

Who should care

Linux kernel maintainers, users, and administrators should assess exposure and prioritize patching or applying compensating controls to prevent potential use-after-free issues in the remoteproc subsystem.

Why it matters

CVE-2026-90431 is a use-after-free vulnerability in the Linux kernel's remoteproc subsystem. Defenders should assess exposure, prioritize patching or compensating controls, and monitor system logs for potential crash handling issues.

  • Defenders should verify Linux kernel versions and configurations to ensure they are not affected by this vulnerability.
  • System administrators should prioritize patching or applying compensating controls to prevent potential use-after-free issues in the remoteproc subsystem.
  • Linux kernel maintainers should review and update kernel versions to ensure they are not affected by this vulnerability.

Technical summary

The Linux kernel's remoteproc subsystem is vulnerable to a use-after-free issue due to a race condition between crash handling and rproc_del(). A 'deleting' flag is introduced to synchronize scheduled work and prevent crashes during shutdown. This vulnerability affects Linux kernel versions and could lead to use-after-free issues if not patched. Defenders should assess exposure, prioritize patching or compensating controls, and monitor system logs for potential crash handling issues. The CVE record and source item provide details about the vulnerability, its impact, and potential mitigations.

Defensive priority

Linux kernel maintainers and users should assess exposure and prioritize patching or applying compensating controls to prevent potential use-after-free issues in the remoteproc subsystem.

Recommended defensive actions

  • Assess exposure and apply patches or compensating controls to prevent use-after-free issues in the Linux kernel's remoteproc subsystem.
  • Review and update Linux kernel versions to ensure they are not affected by this vulnerability.
  • Monitor system logs for potential crash handling issues in the remoteproc subsystem.
  • Verify Linux kernel configurations to ensure they are not affected by this vulnerability.
  • Prioritize patching or applying compensating controls to prevent potential use-after-free issues in the remoteproc subsystem.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details about the vulnerability, its impact, and potential mitigations. However, the corpus does not establish specific versions affected or fixed, exploitation, or remediation beyond patching.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-90431 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-90431

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-90431 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-90431

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • remoteproc: Prevent crash handling to race with rproc_del()

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90431.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/50f232c26298923d39a48dc8e03d1732e5a5dcf1

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/69af36f1fb7d24d287662fef6b2093bcf847a9db

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/a8a62cb4d2f3fd6aa06e86f1711c62d2a4cf17d5

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/47de033918cd772146f7438aa04471c020b2dedc

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/a31d9562eeec5c4103c202fc87651f6e7d3d0035

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/f15cde11298402f803d5dda9cb9f95eea3d2ca40

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/61862ed651b2493573e6d2192d5640bc6616f5d0

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.