01 Record

CVE-2026-90326

blk-cgroup: fix race between policy activation and blkg destruction

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

blk-cgroup: fix race between policy activation and blkg destruction

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.1% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Received. NVD last modified this record on 2026-10-21.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-17 16:08Z1 MO AGO

Last updated

2026-10-21 12:51Z7 DAYS AGO

Reserved

2026-09-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-825Expired Pointer DereferenceBase
CWE-416Use After FreeVariant

Data version

5.2

Document digest

b4a932a68689567f89a7fc4373c3ac997e3bae2f81d9e5cdccbe98274d8b7746

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux81c1188905f88b77743d1fdeeedfc8cb7b67787d to < b5dae1cd0d8368b4338430ff93403df67f0b8bcc, bfe46d2efe46c5c952f982e2ca94fe2ec5e58e2a to < 083b58373463a6e5ee60ecb135269348f68ad7df, f1c006f1c6850c14040f8337753a63119bba39b9 to < 17c18a0df70c2b89ff7fcd74622f1540e98d00fd, f1c006f1c6850c14040f8337753a63119bba39b9 to < 91062e3a9ed251726df4e20ff9a1113f1c8ded59, f1c006f1c6850c14040f8337753a63119bba39b9 to < ac34e655dffa74349d885a43d098115336f53842, f1c006f1c6850c14040f8337753a63119bba39b9 to < 2cf9f50a38c1839e549a08e22aa35e8d69e2c8fd, f1c006f1c6850c14040f8337753a63119bba39b9 to < 5313d4d41739b0cb63000747c97bb1217ac45f3e, 6.1.16 to < 6.1.17, 6.2.3 to < 6.2.4, 6.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b5dae1cd0d8368b4338430ff93403df67f0b8bcc
git.kernel.orghttps://git.kernel.org/stable/c/083b58373463a6e5ee60ecb135269348f68ad7df
git.kernel.orghttps://git.kernel.org/stable/c/17c18a0df70c2b89ff7fcd74622f1540e98d00fd
git.kernel.orghttps://git.kernel.org/stable/c/91062e3a9ed251726df4e20ff9a1113f1c8ded59
git.kernel.orghttps://git.kernel.org/stable/c/ac34e655dffa74349d885a43d098115336f53842
git.kernel.orghttps://git.kernel.org/stable/c/2cf9f50a38c1839e549a08e22aa35e8d69e2c8fd
git.kernel.orghttps://git.kernel.org/stable/c/5313d4d41739b0cb63000747c97bb1217ac45f3e

07 Fixed in

Debian 12

linux
No fix yet

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
No fix yet

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.