01 Record

CVE-2026-90318

fat: release buffer head after rebuilding parent

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

fat: release buffer head after rebuilding parent

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-17 16:08Z1 MO AGO

Last updated

2026-10-19 09:01Z10 DAYS AGO

Reserved

2026-09-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

deef07cd274142ab46fd6b5cffd23972300435e4ad108d86fdd3f97916335c30

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 5e44b6944e11fd6647f028219ad0be4e85e9acee, f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < d2a86329152c69a6200c15b2bf618755f8563826, f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 0f18d712ba9c980e05b7e33a27cde4fe3ed2d393, f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < e38587d98d1ceac608420052c0cdd901d25878f3, f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < c6a67aa438179cad40f8ae45469e304338d65c0a, f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 571ea4263d69df1b48578e4314a828ecd0604755, f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 7565e44507634514e3e1899d3acad3de43f7a2c1, f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 83e98dbf19ab64e8528e101e20f8d50e1aaa68a8, 3.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5e44b6944e11fd6647f028219ad0be4e85e9acee
git.kernel.orghttps://git.kernel.org/stable/c/d2a86329152c69a6200c15b2bf618755f8563826
git.kernel.orghttps://git.kernel.org/stable/c/0f18d712ba9c980e05b7e33a27cde4fe3ed2d393
git.kernel.orghttps://git.kernel.org/stable/c/e38587d98d1ceac608420052c0cdd901d25878f3
git.kernel.orghttps://git.kernel.org/stable/c/c6a67aa438179cad40f8ae45469e304338d65c0a
git.kernel.orghttps://git.kernel.org/stable/c/571ea4263d69df1b48578e4314a828ecd0604755
git.kernel.orghttps://git.kernel.org/stable/c/7565e44507634514e3e1899d3acad3de43f7a2c1
git.kernel.orghttps://git.kernel.org/stable/c/83e98dbf19ab64e8528e101e20f8d50e1aaa68a8

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.