CVE-2026-89514scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock fnic_fcoe_process_vlan_resp() allocates a VLAN descriptor with kzalloc_obj() (default GFP_KERNEL) while holding vlans_lock via spin_lock_irqsave(). GFP_KERNEL may sleep, which is not allowed in this atomic context and can trigger a sleeping-from-invalid-context warning or deadlock. Pass GFP_ATOMIC so the allocation is safe under the IRQ-safe spinlock.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 098585aa8acab3fcd46ce908af84ef168f5ccab6 before c4ade059aaeb51fdb3f4ae71e1ea3e2019b85178; from 098585aa8acab3fcd46ce908af84ef168f5ccab6 before d86f65aed01408613607f8fc31493f07554788f2; 098585aa8acab3fcd46ce908af84ef168f5ccab6 builds before 9639c6324524ea3f934908bd51f02430000954ab | CNA record |
References
- https://git.kernel.org/stable/c/c4ade059aaeb51fdb3f4ae71e1ea3e2019b85178
- https://git.kernel.org/stable/c/d86f65aed01408613607f8fc31493f07554788f2
- https://git.kernel.org/stable/c/9639c6324524ea3f934908bd51f02430000954ab
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.