CVE-2026-90318
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent fat_scan_logstart() leaves the matching directory entry's buffer head in sinfo.bh for the caller to release, just like fat_scan(). fat_rebuild_parent() uses the directory entry to rebuild the parent inode for the nostale_ro NFS export path, but does not release sinfo.bh after a successful scan. Release it once fat_build_inode() has consumed the directory entry data.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux5e44b6944e11fd6647f028219ad0be4e85e9acee, d2a86329152c69a6200c15b2bf618755f8563826, 0f18d712ba9c980e05b7e33a27cde4fe3ed2d393, e38587d98d1ceac608420052c0cdd901d25878f3, c6a67aa438179cad40f8ae45469e304338d65c0a, 571ea4263d69df1b48578e4314a828ecd0604755, 7565e44507634514e3e1899d3acad3de43f7a2c1, 83e98dbf19ab64e8528e101e20f8d50e1aaa68a8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < 5e44b6944e11fd6647f028219ad0be4e85e9acee, f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < d2a86329152c69a6200c15b2bf618755f8563826, f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < 0f18d712ba9c980e05b7e33a27cde4fe3ed2d393, f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < e38587d98d1ceac608420052c0cdd901d25878f3, f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < c6a67aa438179cad40f8ae45469e304338d65c0a, f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < 571ea4263d69df1b48578e4314a828ecd0604755, f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < 7565e44507634514e3e1899d3acad3de43f7a2c1, f1e6fb0ab451dae8523fbb8c119a653b2730e938 ≤ v < 83e98dbf19ab64e8528e101e20f8d50e1aaa68a8, 3.10 | 5e44b6944e11fd6647f028219ad0be4e85e9acee, d2a86329152c69a6200c15b2bf618755f8563826, 0f18d712ba9c980e05b7e33a27cde4fe3ed2d393, e38587d98d1ceac608420052c0cdd901d25878f3, c6a67aa438179cad40f8ae45469e304338d65c0a, 571ea4263d69df1b48578e4314a828ecd0604755, 7565e44507634514e3e1899d3acad3de43f7a2c1, 83e98dbf19ab64e8528e101e20f8d50e1aaa68a8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.