« Volver al listado

CVE-2026-90318

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

fat: release buffer head after rebuilding parent

fat_scan_logstart() leaves the matching directory entry's buffer head in sinfo.bh for the caller to release, just like fat_scan().

fat_rebuild_parent() uses the directory entry to rebuild the parent inode for the nostale_ro NFS export path, but does not release sinfo.bh after a successful scan. Release it once fat_build_inode() has consumed the directory entry data.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-90318",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "5e44b6944e11fd6647f028219ad0be4e85e9acee",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "d2a86329152c69a6200c15b2bf618755f8563826",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "0f18d712ba9c980e05b7e33a27cde4fe3ed2d393",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "e38587d98d1ceac608420052c0cdd901d25878f3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "c6a67aa438179cad40f8ae45469e304338d65c0a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "571ea4263d69df1b48578e4314a828ecd0604755",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "7565e44507634514e3e1899d3acad3de43f7a2c1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1e6fb0ab451dae8523fbb8c119a653b2730e938",
              "lessThan": "83e98dbf19ab64e8528e101e20f8d50e1aaa68a8",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "fs/fat/nfs.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.10"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "3.10",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "fs/fat/nfs.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-17T17:17:29.683",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0f18d712ba9c980e05b7e33a27cde4fe3ed2d393",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/571ea4263d69df1b48578e4314a828ecd0604755",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5e44b6944e11fd6647f028219ad0be4e85e9acee",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/7565e44507634514e3e1899d3acad3de43f7a2c1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/83e98dbf19ab64e8528e101e20f8d50e1aaa68a8",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c6a67aa438179cad40f8ae45469e304338d65c0a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d2a86329152c69a6200c15b2bf618755f8563826",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e38587d98d1ceac608420052c0cdd901d25878f3",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfat: release buffer head after rebuilding parent\n\nfat_scan_logstart() leaves the matching directory entry's buffer head in\nsinfo.bh for the caller to release, just like fat_scan().\n\nfat_rebuild_parent() uses the directory entry to rebuild the parent inode\nfor the nostale_ro NFS export path, but does not release sinfo.bh after a\nsuccessful scan.  Release it once fat_build_inode() has consumed the\ndirectory entry data."
    }
  ],
  "lastModified": "2026-09-17T17:17:29.683",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}