7.8

CVE-2026-90227

nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

In the Linux kernel, the following vulnerability has been resolved:

nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls
nvme_cmd_allowed(). Unprivileged callers can thus issue I/O on a
partition device or write through a read-only file descriptor.

Pass flags and open_for_write through and reject disallowed commands
with -EACCES.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a53295b6998f62d961c29e54051c1cf1d738c2b3
Version < c35cd98eed1a863e8dd51073953563cd8c907f68
Status affected
Version a53295b6998f62d961c29e54051c1cf1d738c2b3
Version < 95b0591d51dbf9e618d7845883d535e88ad7c8af
Status affected
Version a53295b6998f62d961c29e54051c1cf1d738c2b3
Version < 736b7c6adc7a65c4411beff197b6a634f7a6ca27
Status affected
Version a53295b6998f62d961c29e54051c1cf1d738c2b3
Version < b116e9dae433ff631f94c36c61a7a78fe400ed1e
Status affected
Version a53295b6998f62d961c29e54051c1cf1d738c2b3
Version < b53d495c7f0db46b6748b5ade48371a10dd5d3bc
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.3
Status affected
Version 0
Version < 3.3
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.06
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c35cd98eed1a863e8dd51073953563cd8c907f68
https://git.kernel.org/stable/c/95b0591d51dbf9e618d7845883d535e88ad7c8af
https://git.kernel.org/stable/c/736b7c6adc7a65c4411beff197b6a634f7a6ca27
https://git.kernel.org/stable/c/b116e9dae433ff631f94c36c61a7a78fe400ed1e
https://git.kernel.org/stable/c/b53d495c7f0db46b6748b5ade48371a10dd5d3bc