CVE-2026-90180block: mtip32xx: synchronize ioctls with device removal
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: block: mtip32xx: synchronize ioctls with device removal The ioctl handlers only test REMOVE_PENDING before entering mtip_hw_ioctl(). Removal can set that bit immediately afterwards and free dd->port in mtip_hw_exit() while an ioctl still dereferences it. An already open block device can reach the handlers while del_gendisk() is in progress. Serialize both native and compat ioctls with removal. Set REMOVE_PENDING before taking the mutex so new callers fail after an in-flight ioctl has drained, and hold the mutex until the port has been torn down.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 88523a61558a040546bf7d8b079ae0755d8e7005 builds before 521afbd936ac256b7531470b0b9aa96abf9cd853; from 88523a61558a040546bf7d8b079ae0755d8e7005 before 8283049aa5fcb4e84b2b2928b2888903bb8ee12e; 88523a61558a040546bf7d8b079ae0755d8e7005 builds before 8a7799597bd683b6bc251fe2edfa9fd1db568a3a; 88523a61558a040546bf7d8b079ae0755d8e7005 builds before 4609e0e0be709e974bec9b52c5022136d25e97d3; from 88523a61558a040546bf7d8b079ae0755d8e7005 before b389dc35a55713ac24a145741e76196fea1663bc; 88523a61558a040546bf7d8b079ae0755d8e7005 builds before 68940f841d013192086a0f6d7cfbac2cd079e228 | CNA record |
References
- https://git.kernel.org/stable/c/521afbd936ac256b7531470b0b9aa96abf9cd853
- https://git.kernel.org/stable/c/8283049aa5fcb4e84b2b2928b2888903bb8ee12e
- https://git.kernel.org/stable/c/8a7799597bd683b6bc251fe2edfa9fd1db568a3a
- https://git.kernel.org/stable/c/4609e0e0be709e974bec9b52c5022136d25e97d3
- https://git.kernel.org/stable/c/b389dc35a55713ac24a145741e76196fea1663bc
- https://git.kernel.org/stable/c/68940f841d013192086a0f6d7cfbac2cd079e228
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.