CVE-2026-89998

High

Description

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dm_setup_md_queue walks &md->table_devices without any lock. If the walk races with dm_table_destroy -> free_devices -> dm_put_table_device, there is access to invalid memory. Fix this race by extending the lock over the list walk.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedSep 16, 2026
First seenSep 16, 2026

How to fix

Update
  • Linux Linuxb02e35b81176c7d61dd441cc7a2e5c324a82444b, 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca, a1af1884c960b98c621b6fe2fea1216b78c02152, af1f32ccf8051f4691ced11feb452b9d13561727, 00ad6f9ed27f91925d4d3fb7aab50a60d774f998, 5380c7f6335cc6d77eb77d065105e81155c4d9d3, 6.1.188, 6.1 or later

Affected products

ProductAffected versionsFixed in
Linux Linux773bfda35c9511734d7f898e2ee73cd60d2a3f38 ≤ v < b02e35b81176c7d61dd441cc7a2e5c324a82444b, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < a1af1884c960b98c621b6fe2fea1216b78c02152, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < af1f32ccf8051f4691ced11feb452b9d13561727, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < 00ad6f9ed27f91925d4d3fb7aab50a60d774f998, 1a581b72169968f4154b5793828f3bc28b258b35 ≤ v < 5380c7f6335cc6d77eb77d065105e81155c4d9d3, 600593707c239bb99486925d65540a5020bc1e58, 6.1.2 ≤ v < 6.1.188, 6.0.16 ≤ v < 6.1, 6.2b02e35b81176c7d61dd441cc7a2e5c324a82444b, 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca, a1af1884c960b98c621b6fe2fea1216b78c02152, af1f32ccf8051f4691ced11feb452b9d13561727, 00ad6f9ed27f91925d4d3fb7aab50a60d774f998, 5380c7f6335cc6d77eb77d065105e81155c4d9d3, 6.1.188, 6.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.