CVE-2026-90302

A flaw was found in the ocfs2 component of the Linux kernel. A race condition exists during the heartbeat teardown process where heartbeat callbacks remain registered while the o2net_wq workqueue is being destroyed. This can lead to a use-after-free vulnerability when queue or flush operations attempt to access the dead workqueue. A local attacker could potentially exploit this to cause system instability or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.