CVE-2026-90202

🗓️ 17 Sep 2026 16:07:19Reported by LinuxType

kernel mpt3sas _base_release_memory_pools frees unallocated PCIe SGL buffers, NULL dereference.

Reporter	Title	Published	Views	Family All 10
Cvelist	CVE-2026-90202 scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers	17 Sep 202616:07	–	cvelist
Debian CVE	CVE-2026-90202	17 Sep 202616:07	–	debiancve
EUVD	EUVD-2026-81795	17 Sep 202616:07	–	euvd
Microsoft CVE	scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers	19 Sep 202608:14	–	mscve
NVD	CVE-2026-90202	17 Sep 202617:17	–	nvd
OSV	AZL-102899 CVE-2026-90202 affecting package kernel 6.6.150.1-1	17 Sep 202617:17	–	osv
OSV	BELL-CVE-2026-90202	19 Sep 202606:06	–	osv
OSV	DEBIAN-CVE-2026-90202	17 Sep 202617:17	–	osv
OSV	UBUNTU-CVE-2026-90202	18 Sep 202600:00	–	osv
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-90202	18 Sep 202600:00	–	nessus

Vulners

CNA

Node

linux linux_kernelRange4.16–5.10.270

linux linux_kernelRange5.11.0–5.15.221

linux linux_kernelRange5.16.0–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.110

linux linux_kernelRange6.13.0–6.18.52

linux linux_kernelRange6.19.0–7.2.6

linux linux_kernelRange7.3.0–7.3-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/scsi/mpt3sas/mpt3sas_base.c"
    ],
    "versions": [
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "3361709fb6f6568b157c6f24ed21a4a5d86d73db",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "240b582b6372bebb1245d911add9954b7dd6c02d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "a61181f9ee30a98d2350c1bff32954a7521f9a23",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "afedf35df054bd713e9e13771aa0a056932c5c67",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "bc3398db3b64729b4a7907af317daad04795ad40",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "2dbdd025b228110ccbfbab95fe16e098313a14af",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "e2cd23443d3616ea0876f27762b17e2ec67d896c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dbec4c9040edc15442c3ebdb65408aa9d3b82c24",
        "lessThan": "b9f679dfe629004b593f018df33b330d799bcee4",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/scsi/mpt3sas/mpt3sas_base.c"
    ],
    "versions": [
      {
        "version": "4.16",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.16",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.110",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.52",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.6",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/a61181f9ee30a98d2350c1bff32954a7521f9a23
git	www.git.kernel.org/stable/c/bc3398db3b64729b4a7907af317daad04795ad40
git	www.git.kernel.org/stable/c/b9f679dfe629004b593f018df33b330d799bcee4
git	www.git.kernel.org/stable/c/3361709fb6f6568b157c6f24ed21a4a5d86d73db
git	www.git.kernel.org/stable/c/2dbdd025b228110ccbfbab95fe16e098313a14af
git	www.git.kernel.org/stable/c/e2cd23443d3616ea0876f27762b17e2ec67d896c
git	www.git.kernel.org/stable/c/afedf35df054bd713e9e13771aa0a056932c5c67
git	www.git.kernel.org/stable/c/240b582b6372bebb1245d911add9954b7dd6c02d

17 Sep 2026 17:17Current

EPSS0.0021