Back to CVE records
Not yet scoredPublished Sep 17, 2026
CVE-2026-90396block: fix dio leak on metadata mapping error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: block: fix dio leak on metadata mapping error A failed integrity mapping holds a dio reference, so we need to go through the full bio ending in case there were previously submitted bio's in the sequence.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2729a60bbfb9215997f25372ebe9b7964f038296 before d29c5a88d5703afb6286038e86e1b88daa4962a9; from 2729a60bbfb9215997f25372ebe9b7964f038296 before cbbaf0c870dde06cf4b887a77a94e3094179ca9f; 2729a60bbfb9215997f25372ebe9b7964f038296 builds before 702a2a9f3dfe066a7481698c858371112f3cb697; 17ecefc9fdd8c554e0d03e5a990daef19f930add; from 6.16.8 before 6.17 | CNA record |
References
- https://git.kernel.org/stable/c/d29c5a88d5703afb6286038e86e1b88daa4962a9
- https://git.kernel.org/stable/c/cbbaf0c870dde06cf4b887a77a94e3094179ca9f
- https://git.kernel.org/stable/c/702a2a9f3dfe066a7481698c858371112f3cb697
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.