CVE-2026-90434
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofs_fill_pages() reads the compressed block pointer table. The error paths release the current buffer_head, the loop also releases the old buffer_head when it advances. However, the success path leaves the last buffer_head referenced. Release it before returning success.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linuxdbcc7d1b818162aeab2e97fd217d86546d9fde15, ec33e6b7a1de20d7e623b12633191a855445657d, 0c2c54a7d174edc845f7bae24179fe72a926d10f, 5677737c2cedf417c0fcf61540b9cef0e62273d4, f2a1611065c700a374b31c5cc8a7587f5e3bfe73, 106e1a3b2b3454fbda63a59e9290cb9a253f81aa, 3371d30a97a257b7b5f2c8009612e9d452180f0a, 2f7dd9b86fe4076059e6a4a2a2c5d565afd76b9e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < dbcc7d1b818162aeab2e97fd217d86546d9fde15, 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < ec33e6b7a1de20d7e623b12633191a855445657d, 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < 0c2c54a7d174edc845f7bae24179fe72a926d10f, 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < 5677737c2cedf417c0fcf61540b9cef0e62273d4, 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < f2a1611065c700a374b31c5cc8a7587f5e3bfe73, 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < 106e1a3b2b3454fbda63a59e9290cb9a253f81aa, 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < 3371d30a97a257b7b5f2c8009612e9d452180f0a, 59bc055211b8d266ab6089158058bf8268e02006 ≤ v < 2f7dd9b86fe4076059e6a4a2a2c5d565afd76b9e, 2.6.33 | dbcc7d1b818162aeab2e97fd217d86546d9fde15, ec33e6b7a1de20d7e623b12633191a855445657d, 0c2c54a7d174edc845f7bae24179fe72a926d10f, 5677737c2cedf417c0fcf61540b9cef0e62273d4, f2a1611065c700a374b31c5cc8a7587f5e3bfe73, 106e1a3b2b3454fbda63a59e9290cb9a253f81aa, 3371d30a97a257b7b5f2c8009612e9d452180f0a, 2f7dd9b86fe4076059e6a4a2a2c5d565afd76b9e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.