CVE-2026-90182

A flaw was found in the Linux kernel's blk-iocost component. When policy data is freed, the system may fail to clear a delay state, causing the block cgroup a mechanism for resource management to remain marked as congested. This persistent congestion can lead to a significant reduction in...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fixed the divide by 0 error in calclcoefs The issue arises when the value of u64 is set to cost.model, and then a division is performed. This could lead to a divide by 0 error. Example: echo 8:0...

SUSE CVE-2026-90182

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

Linux Distros Unpatched Vulnerability : CVE-2026-90182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setti...

CVE-2026-90182

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

AZL-101951 CVE-2026-90182 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

DEBIAN-CVE-2026-90182

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

EUVD-2026-81775

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

CVE-2026-90182 blk-iocost: clear delay state when freeing policy data

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

CVE-2026-90182

CVE-2026-90182 affects the Linux kernel 's blk-iocost block-I/O cost cgroup controller. When ioc_pd_free() removes an iocg from active_iocgs and cancels its waitq timer, no further mechanism can reduce debt or clear the delay state previously set by iocg_kick_delay() (which sets blkg->use_dela...

CVE-2026-90182 blk-iocost: clear delay state when freeing policy data

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

CVE-2026-90182: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocgkickdelay turns sufficiently large debt into an explicit block-cgroup delay with blkcgsetdelay, setting blkg-usedelay to -1 and incrementing blkcg-congestioncount. Cleari...

PT-2026-94530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the blk-iocost component where the delay state is not cleared when freeing policy data. The iocg kick delay function converts large debt into a block-cgroup delay via...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iocost: Fixed the issue of dividing by zero when donating from cgroups with an active hweight of less than 2. The donation calculation logic assumes that the donor’s hweight remains non-zero after the donation. Therefore, the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: Avoid out-of-bounds shifts. UBSAN encounters undefined behavior in blk-iocost, where sometimes iocg-delay is shifted right by a number that is too large, resulting in undefined behavior on some architectures. 186.5565...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: Do not issue a warning if iocg was already offline. In iocgpaydebt, a warning is triggered if ‘activelist’ is empty. This is intended to confirm that iocg is active when it has debts. However, a warning can still be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: Use spinlockirqsave in adjustinuseandcalccost. The adjustinuseandcalccost function uses spinlockirq, and IRQ will be enabled when unlocking. A DEADLOCK may occur if other locks are held and IRQs are disabled before...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - block: Fixed a issue where rq-qos\donebio was skipped if BIOTRACKED was not set. As a result, bioendio now skips rqqosdonebio if BIOTRACKED is not set. While this fixed a potential error, it also caused issues with blk-iocos...

The vulnerability of the calc_lcoefs() function in the block/blk-iocost.c module of the Linux kernel’s block-level support mechanism allows a attacker to cause a service failure.

The vulnerability of the calclcoefs function in the block/blk-iocost.c module of the Linux kernel’s block-level support mechanism is related to insufficient checking of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013797 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fix divide by 0 error in calclcoefs echo max of u64 to cost.model can cause divide by...