CVE-2026-90029

A flaw was found in the Linux kernel's realtek_cr USB storage driver. This vulnerability, a use-after-free, occurs when the system attempts to access memory that has already been released. During a USB device disconnection, a timer within the realtek_cr module is deleted before its associated callback function has fully completed. This can cause the system to attempt to use freed memory, potentially leading to system instability, crashes, or a denial of service.

This vulnerability is assessed with a Moderate severity for Red Hat Enterprise Linux because exploitation requires local access or physical device disconnection, restricting the potential impact to a system crash. In typical server and cloud environments, USB card readers are rarely utilized, so the relevant driver module is not loaded by default. Systems without attached physical or emulated Realtek USB storage hardware remain unaffected during standard operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.