Strix
75.2K

CVE-2026-90267

UnknownEPSS 0.21%

Last modified

CVE-2026-90267 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bvec() allocates a special payload page for UNMAP and WRITE SAME commands. If scsi_alloc_sgtables() fails afterward in sd_setup_unmap_cmnd() or sd_setup_write_same{10,16}_cmnd(), the SCSI midlayer does not call uninit_command() because RQF_DONTPREP is not set yet, leaking the page. Call sd_uninit_command() on error, and clear RQF_SPECIAL_PAYLOAD after freeing the page.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bvec() allocates a special payload page for UNMAP and WRITE SAME commands. If scsi_alloc_sgtables() fails afterward in sd_setup_unmap_cmnd() or sd_setup_write_same{10,16}_cmnd(), the SCSI midlayer does not call uninit_command() because RQF_DONTPREP is not set yet, leaking the page. Call sd_uninit_command() on error, and clear RQF_SPECIAL_PAYLOAD after freeing the page.

Metrics

EPSS Probability
0.21%

11.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < 05bc68669549bfddfdeef2fd119855cab3e9615a; >= 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < 710a2448a06a8215ba8acb4a2791954800f7db0a; >= 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < 744a65e113094756e6c1cfba9ff1bf4247cb68d4; >= 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < e90f746f4ca3896ca560e820b7b6b0a467026938; >= 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < 5d7d1b8b525e5eff33a01d07dfcf7bdd3b6d790d; >= 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87, < bb31844d88b77138b67aa20c3600203baff40140
LinuxLinux4.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-90267?
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bvec() allocates a special payload page for UNMAP and WRITE SAME commands. If scsi_alloc_sgtables() fails afterward in sd_setup_unmap_cmnd() or sd_setup_write_same{10,16}_cmnd(), the SCSI midlayer does not call uninit_command() because RQF_DONTPREP is not set yet, leaking the page. Call sd_uninit_command() on error, and clear RQF_SPECIAL_PAYLOAD after freeing the page.
How severe is CVE-2026-90267?
Severity scoring for CVE-2026-90267 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-90267?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-90267?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST