Linux Distros Unpatched Vulnerability : CVE-2026-90326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block device, blkcgactivatepolicy allocates blkgpolicyda...

Linux Distros Unpatched Vulnerability : CVE-2026-90325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-cgroup: skip dying blkg in blkcgactivatepolicy When switching IO schedulers on a block device, blkcgactivatepolicy can race with concurrent blkcg deletion,...

DEBIAN-CVE-2026-90326

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block device, blkcgactivatepolicy allocates blkgpolicydata pd for all blkgs attached to the queue. However, blkcgactivatepoli...

AZL-102774 CVE-2026-90326 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block device, blkcgactivatepolicy allocates blkgpolicydata pd for all blkgs attached to the queue. However, blkcgactivatepoli...

DEBIAN-CVE-2026-90325

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcgactivatepolicy When switching IO schedulers on a block device, blkcgactivatepolicy can race with concurrent blkcg deletion, leading to a use-after-free in rcuacceleratecbs. T1: T2: blkgdestroy...

AZL-102555 CVE-2026-90325 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcgactivatepolicy When switching IO schedulers on a block device, blkcgactivatepolicy can race with concurrent blkcg deletion, leading to a use-after-free in rcuacceleratecbs. T1: T2: blkgdestroy...

CVE-2026-90325

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcgactivatepolicy When switching IO schedulers on a block device, blkcgactivatepolicy can race with concurrent blkcg deletion, leading to a use-after-free in rcuacceleratecbs. T1: T2: blkgdestroy...

CVE-2026-90326

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block device, blkcgactivatepolicy allocates blkgpolicydata pd for all blkgs attached to the queue. However, blkcgactivatepoli...

EUVD-2026-81987

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block device, blkcgactivatepolicy allocates blkgpolicydata pd for all blkgs attached to the queue. However, blkcgactivatepoli...

CVE-2026-90326

A race condition in the Linux kernel's blk-cgroup subsystem can lead to a use-after-free and memory leak when switching an I/O scheduler on a block device. The race occurs between blkcg_activate_policy() and concurrent blkcg deletion: the rollback path may access already-freed policy data (pd), a...

CVE-2026-90326 blk-cgroup: fix race between policy activation and blkg destruction

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block device, blkcgactivatepolicy allocates blkgpolicydata pd for all blkgs attached to the queue. However, blkcgactivatepoli...

CVE-2026-90326 blk-cgroup: fix race between policy activation and blkg destruction

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block device, blkcgactivatepolicy allocates blkgpolicydata pd for all blkgs attached to the queue. However, blkcgactivatepoli...

CVE-2026-90325 blk-cgroup: skip dying blkg in blkcg_activate_policy()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcgactivatepolicy When switching IO schedulers on a block device, blkcgactivatepolicy can race with concurrent blkcg deletion, leading to a use-after-free in rcuacceleratecbs. T1: T2: blkgdestroy...

CVE-2026-90325 blk-cgroup: skip dying blkg in blkcg_activate_policy()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcgactivatepolicy When switching IO schedulers on a block device, blkcgactivatepolicy can race with concurrent blkcg deletion, leading to a use-after-free in rcuacceleratecbs. T1: T2: blkgdestroy...

EUVD-2026-81986

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcgactivatepolicy When switching IO schedulers on a block device, blkcgactivatepolicy can race with concurrent blkcg deletion, leading to a use-after-free in rcuacceleratecbs. T1: T2: blkgdestroy...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

The vulnerability of the blkcg_maybe_throttle_current() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to trigger a service failure.

The vulnerability of the blkcgmaybethrottlecurrent function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, relates to the failure to release resources after their useful lifespan has expired. Exploiting this vulnerability could allow an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098804 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfn cgwbreleaseworkfn calls cssputwb-blkcgcss...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: blk-cgroup: fixed a UAF vulnerability by acquiring the blkcg lock before destroying the blkg. KASAN reports a use-after-free issue during the fuzz test: 693354.104835...