CVE-2026-90202

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers _base_release_memory_pools() unconditionally frees every ioc->pcie_sg_lookup[] entry, including ones the setup loop never allocated after a partial failure, causing a "bad dma" warning on debug kernels or a NULL pointer dereference otherwise.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linux3361709fb6f6568b157c6f24ed21a4a5d86d73db, 240b582b6372bebb1245d911add9954b7dd6c02d, a61181f9ee30a98d2350c1bff32954a7521f9a23, afedf35df054bd713e9e13771aa0a056932c5c67, bc3398db3b64729b4a7907af317daad04795ad40, 2dbdd025b228110ccbfbab95fe16e098313a14af, e2cd23443d3616ea0876f27762b17e2ec67d896c, b9f679dfe629004b593f018df33b330d799bcee4 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxdbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < 3361709fb6f6568b157c6f24ed21a4a5d86d73db, dbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < 240b582b6372bebb1245d911add9954b7dd6c02d, dbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < a61181f9ee30a98d2350c1bff32954a7521f9a23, dbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < afedf35df054bd713e9e13771aa0a056932c5c67, dbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < bc3398db3b64729b4a7907af317daad04795ad40, dbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < 2dbdd025b228110ccbfbab95fe16e098313a14af, dbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < e2cd23443d3616ea0876f27762b17e2ec67d896c, dbec4c9040edc15442c3ebdb65408aa9d3b82c24 ≤ v < b9f679dfe629004b593f018df33b330d799bcee4, 4.163361709fb6f6568b157c6f24ed21a4a5d86d73db, 240b582b6372bebb1245d911add9954b7dd6c02d, a61181f9ee30a98d2350c1bff32954a7521f9a23, afedf35df054bd713e9e13771aa0a056932c5c67, bc3398db3b64729b4a7907af317daad04795ad40, 2dbdd025b228110ccbfbab95fe16e098313a14af, e2cd23443d3616ea0876f27762b17e2ec67d896c, b9f679dfe629004b593f018df33b330d799bcee4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-90202 · Linux · Dark Radar