CVE-2026-90324
High
Description
In the Linux kernel, the following vulnerability has been resolved: ublk: check import_ubuf() return value import_ubuf() can fail if the address range (provided by the userspace ublk server) is outside the allowed user address space. Return that 0 bytes were copied if import_ubuf() fails rather than passing an uninitialized struct iov_iter to ublk_copy_user_pages().
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux7f97c762b5f6e0005c5c7d040ded73bf7fb3587e, 27ff6e8703f7a7160c728501da2f8ef8e7bb6b2f, 0121c84adb6a4cd6f7560b5895bd88f9899bbc1f, 5ac6019cb78e98c9608fda72726b36ddf8474dd7, 3831568792af75b6523fa93bb91560e29189cf55 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 981f95a571e3ca20a496c0b77dbf6b06039c6648 ≤ v < 7f97c762b5f6e0005c5c7d040ded73bf7fb3587e, 981f95a571e3ca20a496c0b77dbf6b06039c6648 ≤ v < 27ff6e8703f7a7160c728501da2f8ef8e7bb6b2f, 981f95a571e3ca20a496c0b77dbf6b06039c6648 ≤ v < 0121c84adb6a4cd6f7560b5895bd88f9899bbc1f, 981f95a571e3ca20a496c0b77dbf6b06039c6648 ≤ v < 5ac6019cb78e98c9608fda72726b36ddf8474dd7, 981f95a571e3ca20a496c0b77dbf6b06039c6648 ≤ v < 3831568792af75b6523fa93bb91560e29189cf55, 6.5 | 7f97c762b5f6e0005c5c7d040ded73bf7fb3587e, 27ff6e8703f7a7160c728501da2f8ef8e7bb6b2f, 0121c84adb6a4cd6f7560b5895bd88f9899bbc1f, 5ac6019cb78e98c9608fda72726b36ddf8474dd7, 3831568792af75b6523fa93bb91560e29189cf55 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.