-

CVE-2026-90180

block: mtip32xx: synchronize ioctls with device removal

In the Linux kernel, the following vulnerability has been resolved:

block: mtip32xx: synchronize ioctls with device removal

The ioctl handlers only test REMOVE_PENDING before entering
mtip_hw_ioctl(). Removal can set that bit immediately afterwards and free
dd->port in mtip_hw_exit() while an ioctl still dereferences it. An already
open block device can reach the handlers while del_gendisk() is in
progress.

Serialize both native and compat ioctls with removal. Set REMOVE_PENDING
before taking the mutex so new callers fail after an in-flight ioctl has
drained, and hold the mutex until the port has been torn down.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 88523a61558a040546bf7d8b079ae0755d8e7005
Version < 521afbd936ac256b7531470b0b9aa96abf9cd853
Status affected
Version 88523a61558a040546bf7d8b079ae0755d8e7005
Version < 8283049aa5fcb4e84b2b2928b2888903bb8ee12e
Status affected
Version 88523a61558a040546bf7d8b079ae0755d8e7005
Version < 8a7799597bd683b6bc251fe2edfa9fd1db568a3a
Status affected
Version 88523a61558a040546bf7d8b079ae0755d8e7005
Version < 4609e0e0be709e974bec9b52c5022136d25e97d3
Status affected
Version 88523a61558a040546bf7d8b079ae0755d8e7005
Version < b389dc35a55713ac24a145741e76196fea1663bc
Status affected
Version 88523a61558a040546bf7d8b079ae0755d8e7005
Version < 68940f841d013192086a0f6d7cfbac2cd079e228
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.3
Status affected
Version 0
Version < 3.3
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.11
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/521afbd936ac256b7531470b0b9aa96abf9cd853
https://git.kernel.org/stable/c/8283049aa5fcb4e84b2b2928b2888903bb8ee12e
https://git.kernel.org/stable/c/8a7799597bd683b6bc251fe2edfa9fd1db568a3a
https://git.kernel.org/stable/c/4609e0e0be709e974bec9b52c5022136d25e97d3
https://git.kernel.org/stable/c/b389dc35a55713ac24a145741e76196fea1663bc
https://git.kernel.org/stable/c/68940f841d013192086a0f6d7cfbac2cd079e228