Strix
64.7K

CVE-2026-93262

HIGHCVSS 7.8/10

Last modified

CVE-2026-93262 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppl_do_flush() The loop in ppl_do_flush() continues iterating after calling ppl_io_unit_finished(), touching io->pending_flushes and leading to a use-after-free. Add a break statement to stop the loop once io is freed..

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppl_do_flush() The loop in ppl_do_flush() continues iterating after calling ppl_io_unit_finished(), touching io->pending_flushes and leading to a use-after-free. Add a break statement to stop the loop once io is freed.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < cf01f9413565e86673baf927291a088b6975692b; >= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < e7505842f1329ece90cb9ea0db87772aeca44052; >= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < b5123bf667ac29ddd8106f9ca7cc01316513ae66; >= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < e77c80670f2c2bf491da9b173931e1da4677c23a; >= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < 8914c3d40870f16429a326e97e4016bedc6ede4c; >= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < 455b56209f9615c3902dcc398dd867abb5ade3ab; >= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < fcf21df7d3c50c8ebeb0757df5d21b02dcae4218; >= 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5, < 371f7a1b392edc8b7cf449cc7713179b588f2d0e
LinuxLinux4.16

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93262?
In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppl_do_flush() The loop in ppl_do_flush() continues iterating after calling ppl_io_unit_finished(), touching io->pending_flushes and leading to a use-after-free. Add a break statement to stop the loop once io is freed.
How severe is CVE-2026-93262?
CVE-2026-93262 has a CVSS score of 7.8/10 (HIGH severity).
How do I fix CVE-2026-93262?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93262?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST