« Volver al listado

CVE-2026-90283

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

hugetlbfs: release subpool on fill_super failure

hugetlbfs_fill_super() allocates a hugepage subpool when size or min_size mount options are specified. hugepage_new_subpool() may also reserve huge pages for min_size.

If root dentry creation fails after the subpool is created, the failure path frees the subpool with kfree(). This bypasses hugepage_put_subpool() and can leave min_size reservations charged.

Use hugepage_put_subpool() on the failure path, matching the normal put_super path.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-90283",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "f2d6cea221d777fab3ba18f805ba4c17c90e0b8b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "91c4f3a87862fd86594d5945512decbfa0b1d13d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "04f0354a4abf6793aa5b3f32e2b019ab206f344d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "5b7fc7a1ce2a5f2cd8ed80a883157c7108074e0b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "1d8be4ee81e73fcc52e58f47842d9a2277cfeaaa",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "dfe848cadfde4179a0691da34f4bed36ff7185b5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "dc2bd517ac0bce4ec7498644bd16b6db502df8e2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7ca02d0ae586fe7df59632966a64f3f1a756ef05",
              "lessThan": "308ab73e97c87bd0e142b11758faab7f88d82854",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "fs/hugetlbfs/inode.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "fs/hugetlbfs/inode.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-17T17:17:25.063",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/04f0354a4abf6793aa5b3f32e2b019ab206f344d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/1d8be4ee81e73fcc52e58f47842d9a2277cfeaaa",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/308ab73e97c87bd0e142b11758faab7f88d82854",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5b7fc7a1ce2a5f2cd8ed80a883157c7108074e0b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/91c4f3a87862fd86594d5945512decbfa0b1d13d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/dc2bd517ac0bce4ec7498644bd16b6db502df8e2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/dfe848cadfde4179a0691da34f4bed36ff7185b5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f2d6cea221d777fab3ba18f805ba4c17c90e0b8b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhugetlbfs: release subpool on fill_super failure\n\nhugetlbfs_fill_super() allocates a hugepage subpool when size or min_size\nmount options are specified.  hugepage_new_subpool() may also reserve huge\npages for min_size.\n\nIf root dentry creation fails after the subpool is created, the failure\npath frees the subpool with kfree().  This bypasses hugepage_put_subpool()\nand can leave min_size reservations charged.\n\nUse hugepage_put_subpool() on the failure path, matching the normal\nput_super path."
    }
  ],
  "lastModified": "2026-09-17T17:17:25.063",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}