CVE-2026-90324

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90324
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90324.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90324
Downstream
Related
Published
2026-09-17T16:08:40Z
Modified
2026-10-28T02:31:08Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ublk: check import_ubuf() return value
Details

In the Linux kernel, the following vulnerability has been resolved:

ublk: check import_ubuf() return value

import_ubuf() can fail if the address range (provided by the userspace ublk server) is outside the allowed user address space. Return that 0 bytes were copied if import_ubuf() fails rather than passing an uninitialized struct iov_iter to ublk_copy_user_pages().

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90324.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
981f95a571e3ca20a496c0b77dbf6b06039c6648
Fixed
7f97c762b5f6e0005c5c7d040ded73bf7fb3587e
Fixed
27ff6e8703f7a7160c728501da2f8ef8e7bb6b2f
Fixed
0121c84adb6a4cd6f7560b5895bd88f9899bbc1f
Fixed
5ac6019cb78e98c9608fda72726b36ddf8474dd7
Fixed
3831568792af75b6523fa93bb91560e29189cf55

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90324.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90324.json"