CVE-2026-90318
- Source
- https://cve.org/CVERecord?id=CVE-2026-90318
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90318.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-90318
- Downstream
- Published
- 2026-09-17T16:08:36Z
- Modified
- 2026-09-18T03:48:37Z
- Summary
- fat: release buffer head after rebuilding parent
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fat: release buffer head after rebuilding parent
fat_scan_logstart() leaves the matching directory entry's buffer head in sinfo.bh for the caller to release, just like fat_scan().
fat_rebuild_parent() uses the directory entry to rebuild the parent inode for the nostale_ro NFS export path, but does not release sinfo.bh after a successful scan. Release it once fat_build_inode() has consumed the directory entry data.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90318.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0f18d712ba9c980e05b7e33a27cde4fe3ed2d393
- https://git.kernel.org/stable/c/571ea4263d69df1b48578e4314a828ecd0604755
- https://git.kernel.org/stable/c/5e44b6944e11fd6647f028219ad0be4e85e9acee
- https://git.kernel.org/stable/c/7565e44507634514e3e1899d3acad3de43f7a2c1
- https://git.kernel.org/stable/c/83e98dbf19ab64e8528e101e20f8d50e1aaa68a8
- https://git.kernel.org/stable/c/c6a67aa438179cad40f8ae45469e304338d65c0a
- https://git.kernel.org/stable/c/d2a86329152c69a6200c15b2bf618755f8563826
- https://git.kernel.org/stable/c/e38587d98d1ceac608420052c0cdd901d25878f3
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90318.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-90318
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedf1e6fb0ab451dae8523fbb8c119a653b2730e938Fixed5e44b6944e11fd6647f028219ad0be4e85e9aceeFixedd2a86329152c69a6200c15b2bf618755f8563826Fixed0f18d712ba9c980e05b7e33a27cde4fe3ed2d393Fixede38587d98d1ceac608420052c0cdd901d25878f3Fixedc6a67aa438179cad40f8ae45469e304338d65c0aFixed571ea4263d69df1b48578e4314a828ecd0604755Fixed7565e44507634514e3e1899d3acad3de43f7a2c1Fixed83e98dbf19ab64e8528e101e20f8d50e1aaa68a8
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced3.10.0Fixed5.10.270
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.221
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.188
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.157
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.110
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.52
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.2.6