Към съдържанието
Търсене

CVE-2026-90183: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when freeing policy data io.latency can throttle a group which has no latency target of its own. When a sibling misses its target, check_scale_change() scales down its peers, and a peer that reaches queue depth one gets blkcg_use_delay() called on it on every further scale-down, even with min_lat_nsec == 0. iolatency_pd_offline() resets the target through iolatency_set_min_lat_nsec(), which clears the delay only on a nonzero to zero transition, so it never clears such a peer. Freeing the policy data then leaves blkg->use_delay set and blkcg->congestion_count elevated with nothing left that can drop it. blk_cgroup_congested() then returns true for every task in that cgroup and its descendants for as long as the cgroup lives: page_cache_sync_ra() cuts readahead to a single page, page_cache_async_ra() skips it altogether, and __folio_throttle_swaprate() takes swap_avail_lock and schedules a throttle on anonymous folio allocation. Clear the delay in iolatency_pd_free(). By then bio-held blkg references have drained, or the queue is frozen for policy deactivation, so check_scale_change() cannot re-arm it. The free callback can also see policy data which was never attached to a blkg, hence the pd->blkg check.

    Засегнати продукти

    • Linux Linux: d70675121546c35feaceebf7ed9caed8716640f3 преди 27573278b1cbc2313ebd31309ac18ac6179b828a; d70675121546c35feaceebf7ed9caed8716640f3 преди 53ccb4b967edc5f82ff6f9c066fb96c31aa7561a; d70675121546c35feaceebf7ed9caed8716640f3 преди b6449a915d1826e1450f6368fc379fe44caa06ca; d70675121546c35feaceebf7ed9caed8716640f3 преди 5c6593422eb3c3a21505436ccf74599a433584c8; d70675121546c35feaceebf7ed9caed8716640f3 преди 02f1b90ab33ef99c89dd96a385b432ff57abc64d; d70675121546c35feaceebf7ed9caed8716640f3 преди 8935bf22c0a0db517a7f72f7097300e05dd852f5
    • Linux Linux: 4.19; преди 4.19; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.114 до 6.12.*; 6.18.57 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

    История

    • 17 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-90183: Linux | freedomonline.bg