CVE-2026-93262md/raid5-ppl: fix use-after-free in ppl_do_flush()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppl_do_flush() The loop in ppl_do_flush() continues iterating after calling ppl_io_unit_finished(), touching io->pending_flushes and leading to a use-after-free. Add a break statement to stop the loop once io is freed.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before cf01f9413565e86673baf927291a088b6975692b; from 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before e7505842f1329ece90cb9ea0db87772aeca44052; from 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before b5123bf667ac29ddd8106f9ca7cc01316513ae66; from 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before e77c80670f2c2bf491da9b173931e1da4677c23a; from 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before 8914c3d40870f16429a326e97e4016bedc6ede4c; 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 builds before 455b56209f9615c3902dcc398dd867abb5ade3ab; from 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 before fcf21df7d3c50c8ebeb0757df5d21b02dcae4218; 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 builds before 371f7a1b392edc8b7cf449cc7713179b588f2d0e | CNA record |
References
- https://git.kernel.org/stable/c/cf01f9413565e86673baf927291a088b6975692b
- https://git.kernel.org/stable/c/e7505842f1329ece90cb9ea0db87772aeca44052
- https://git.kernel.org/stable/c/b5123bf667ac29ddd8106f9ca7cc01316513ae66
- https://git.kernel.org/stable/c/e77c80670f2c2bf491da9b173931e1da4677c23a
- https://git.kernel.org/stable/c/8914c3d40870f16429a326e97e4016bedc6ede4c
- https://git.kernel.org/stable/c/455b56209f9615c3902dcc398dd867abb5ade3ab
- https://git.kernel.org/stable/c/fcf21df7d3c50c8ebeb0757df5d21b02dcae4218
- https://git.kernel.org/stable/c/371f7a1b392edc8b7cf449cc7713179b588f2d0e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.