CVE-2026-89998
Description
In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dm_setup_md_queue walks &md->table_devices without any lock. If the walk races with dm_table_destroy -> free_devices -> dm_put_table_device, there is access to invalid memory. Fix this race by extending the lock over the list walk.
How to fix
- Linux Linuxb02e35b81176c7d61dd441cc7a2e5c324a82444b, 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca, a1af1884c960b98c621b6fe2fea1216b78c02152, af1f32ccf8051f4691ced11feb452b9d13561727, 00ad6f9ed27f91925d4d3fb7aab50a60d774f998, 5380c7f6335cc6d77eb77d065105e81155c4d9d3, 6.1.188, 6.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 773bfda35c9511734d7f898e2ee73cd60d2a3f38 ≤ v < b02e35b81176c7d61dd441cc7a2e5c324a82444b, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < a1af1884c960b98c621b6fe2fea1216b78c02152, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < af1f32ccf8051f4691ced11feb452b9d13561727, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < 00ad6f9ed27f91925d4d3fb7aab50a60d774f998, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < 5380c7f6335cc6d77eb77d065105e81155c4d9d3, 600593707c239bb99486925d65540a5020bc1e58, 6.1.2 ≤ v < 6.1.188, 6.0.16 ≤ v < 6.1, 6.2 | b02e35b81176c7d61dd441cc7a2e5c324a82444b, 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca, a1af1884c960b98c621b6fe2fea1216b78c02152, af1f32ccf8051f4691ced11feb452b9d13561727, 00ad6f9ed27f91925d4d3fb7aab50a60d774f998, 5380c7f6335cc6d77eb77d065105e81155c4d9d3, 6.1.188, 6.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.