CVE-2026-90323
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ublk: validate auto buf reg before taking uring_cmd With UBLK_F_AUTO_BUF_REG, invalid sqe->addr can fail after ublk_fill_io_cmd() has set UBLK_IO_FLAG_ACTIVE. The uring_cmd is completed while the tag stays active, which can hang teardown. Split validation from buffer apply so the check has no side effects, then take the uring_cmd and store the already-validated buffer. Apply the same order in FETCH so io->buf is not written before __ublk_fetch() state checks.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux8397942b67128e0b1275cfedb5abf4faafac5fd0, 653d22269a8b83b491f7f186a5d7872f14e6ddca, ca5a01eee34c7cbe0f531a613b0292a3ad1a419b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 52460dda3a775a73f226312b43c0a0211e8665ea ≤ v < 8397942b67128e0b1275cfedb5abf4faafac5fd0, 52460dda3a775a73f226312b43c0a0211e8665ea ≤ v < 653d22269a8b83b491f7f186a5d7872f14e6ddca, 52460dda3a775a73f226312b43c0a0211e8665ea ≤ v < ca5a01eee34c7cbe0f531a613b0292a3ad1a419b, 6.17 | 8397942b67128e0b1275cfedb5abf4faafac5fd0, 653d22269a8b83b491f7f186a5d7872f14e6ddca, ca5a01eee34c7cbe0f531a613b0292a3ad1a419b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.