CVE-2026-90420: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-90420DEBIAN-CVE-2026-90420
Published 17-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-90420 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.7% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.22%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:11893-1

Timeline

  1. 17-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfs_clean_segments() syzbot reported a hung task in nilfs_transaction_begin(). This occurs because the cleaner ioctl falls into an infinite loop if nilfs_segctor_construct() repeatedly returns -EROFS (e.g. the device is remounted as read-only after an I/O error). Currently in nilfs_clean_segments(), if err is non-zero, it logs the error and sleeps but doesn't abort when it encounters a terminal error like -EROFS. This causes the thread to loop forever. Fix this by breaking out of the loop if nilfs_segctor_construct() returns -EROFS. This matches the behaviour in nilfs_segctor_write_out(), which also handles -EROFS.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

+0.01 pp

From 0.21% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.111-1 | < 7.2.6-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux1 product
  • linux≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < e3e9367dae1a6392cbb14ab0b2ab5edbf39735c3 | ≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < 217b967ad7887a3e1ebc08f46f6484e081acd4b4 | ≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < 3bcdbdaac884a4baa59716cf9bd9470c75276e2d | ≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < d7afca8e4efbf4c455b4663c29ae59fde2f1b671 | ≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < c07e5ad6539e7e9350d5c65cbf8adb69d1711b15 | ≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < 1fc6df85b4954b6fda9c351843aaca3c06f66d8d | ≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < 8cea0bc78ac64cb88da49c07f80bf2cf9fb7aff8 | ≥ 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453, < ce5a5ad1a8330a2fcfdd9ec2ab341be739e89a18 | 2.6.30

3 vendors · 172 products

References

13 links
Show all 13 references