CVE-2026-90180
Description
In the Linux kernel, the following vulnerability has been resolved: block: mtip32xx: synchronize ioctls with device removal The ioctl handlers only test REMOVE_PENDING before entering mtip_hw_ioctl(). Removal can set that bit immediately afterwards and free dd->port in mtip_hw_exit() while an ioctl still dereferences it. An already open block device can reach the handlers while del_gendisk() is in progress. Serialize both native and compat ioctls with removal. Set REMOVE_PENDING before taking the mutex so new callers fail after an in-flight ioctl has drained, and hold the mutex until the port has been torn down.
How to fix
- Linux Linux521afbd936ac256b7531470b0b9aa96abf9cd853, 8283049aa5fcb4e84b2b2928b2888903bb8ee12e, 8a7799597bd683b6bc251fe2edfa9fd1db568a3a, 4609e0e0be709e974bec9b52c5022136d25e97d3, b389dc35a55713ac24a145741e76196fea1663bc, 68940f841d013192086a0f6d7cfbac2cd079e228 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 88523a61558a040546bf7d8b079ae0755d8e7005 ≤ v < 521afbd936ac256b7531470b0b9aa96abf9cd853, 88523a61558a040546bf7d8b079ae0755d8e7005 ≤ v < 8283049aa5fcb4e84b2b2928b2888903bb8ee12e, 88523a61558a040546bf7d8b079ae0755d8e7005 ≤ v < 8a7799597bd683b6bc251fe2edfa9fd1db568a3a, 88523a61558a040546bf7d8b079ae0755d8e7005 ≤ v < 4609e0e0be709e974bec9b52c5022136d25e97d3, 88523a61558a040546bf7d8b079ae0755d8e7005 ≤ v < b389dc35a55713ac24a145741e76196fea1663bc, 88523a61558a040546bf7d8b079ae0755d8e7005 ≤ v < 68940f841d013192086a0f6d7cfbac2cd079e228, 3.3 | 521afbd936ac256b7531470b0b9aa96abf9cd853, 8283049aa5fcb4e84b2b2928b2888903bb8ee12e, 8a7799597bd683b6bc251fe2edfa9fd1db568a3a, 4609e0e0be709e974bec9b52c5022136d25e97d3, b389dc35a55713ac24a145741e76196fea1663bc, 68940f841d013192086a0f6d7cfbac2cd079e228 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.