CVE-2026-90267: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-90267DEBIAN-CVE-2026-90267
Published 17-09-2026Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2026-90267 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.1% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · +0.05 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:11893-1

Timeline

  1. 17-09-2026
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bvec() allocates a special payload page for UNMAP and WRITE SAME commands. If scsi_alloc_sgtables() fails afterward in sd_setup_unmap_cmnd() or sd_setup_write_same{10,16}_cmnd(), the SCSI midlayer does not call uninit_command() because RQF_DONTPREP is not set yet, leaking the page. Call sd_uninit_command() on error, and clear RQF_SPECIAL_PAYLOAD after freeing the page.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

+0.05 pp

From 0.15% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu168 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linuxAll versions (No fix recorded) | < 7.2.6-1
Linux1 product
  • linux≥ 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < 710a2448a06a8215ba8acb4a2791954800f7db0a | ≥ 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < 744a65e113094756e6c1cfba9ff1bf4247cb68d4 | ≥ 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < e90f746f4ca3896ca560e820b7b6b0a467026938 | ≥ 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < 5d7d1b8b525e5eff33a01d07dfcf7bdd3b6d790d | ≥ 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < bb31844d88b77138b67aa20c3600203baff40140 | 4.12

3 vendors · 170 products

References

9 links