CVE-2026-90323: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: ublk: validate auto buf reg before taking uring_cmd With UBLK_F_AUTO_BUF_REG, invalid sqe->addr can fail after ublk_fill_io_cmd() has set UBLK_IO_FLAG_ACTIVE. The uring_cmd is completed while the tag stays active, which can hang teardown. Split validation from buffer apply so the check has no side effects, then take the uring_cmd and store the already-validated buffer. Apply the same order in FETCH so io->buf is not written before __ublk_fetch() state checks.

Засегнати продукти

• Linux Linux: 52460dda3a775a73f226312b43c0a0211e8665ea преди 8397942b67128e0b1275cfedb5abf4faafac5fd0; 52460dda3a775a73f226312b43c0a0211e8665ea преди 653d22269a8b83b491f7f186a5d7872f14e6ddca; 52460dda3a775a73f226312b43c0a0211e8665ea преди ca5a01eee34c7cbe0f531a613b0292a3ad1a419b
• Linux Linux: 6.17; преди 6.17; 6.18.57 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-90323
• https://nvd.nist.gov/vuln/detail/CVE-2026-90323
• https://git.kernel.org/stable/c/8397942b67128e0b1275cfedb5abf4faafac5fd0
• https://git.kernel.org/stable/c/653d22269a8b83b491f7f186a5d7872f14e6ddca
• https://git.kernel.org/stable/c/ca5a01eee34c7cbe0f531a613b0292a3ad1a419b