DEBIAN-CVE-2026-90183

In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when freeing policy data io.latency can throttle a group which has no latency target of its own. When a sibling misses its target, checkscalechange scales down its peers, and a peer that reaches...

CVE-2026-90183 blk-iolatency: clear delay state when freeing policy data

In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when freeing policy data io.latency can throttle a group which has no latency target of its own. When a sibling misses its target, checkscalechange scales down its peers, and a peer that reaches...

CVE-2026-90183

CVE-2026-90183 affects the blk-iolatency component of the Linux kernel . The root cause is that iolatency_pd_offline() clears the delay state only on a nonzero-to-zero transition of min_lat_nsec, so a peer group throttled by a sibling (with min_lat_nsec == 0) never gets its use_delay flag cleared...

CVE-2026-90182

CVE-2026-90182 affects the Linux kernel 's blk-iocost block-I/O cost cgroup controller. When ioc_pd_free() removes an iocg from active_iocgs and cancels its waitq timer, no further mechanism can reduce debt or clear the delay state previously set by iocg_kick_delay() (which sets blkg->use_dela...

EUVD-2026-81775

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...