CVE-2026-90396
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-90396, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-17
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
block: fix dio leak on metadata mapping error
A failed integrity mapping holds a dio reference, so we need to go
through the full bio ending in case there were previously submitted
bio's in the sequence.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 2729a60bbfb9215997f25372ebe9b7964f038296 |
| Linux | Linux | 2729a60bbfb9215997f25372ebe9b7964f038296 |
| Linux | Linux | 2729a60bbfb9215997f25372ebe9b7964f038296 |
| Linux | Linux | 17ecefc9fdd8c554e0d03e5a990daef19f930add |
| Linux | Linux | 6.16.8 |
| Linux | Linux | 6.17 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |