CVE-2026-93057

Source
https://cve.org/CVERecord?id=CVE-2026-93057
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93057.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93057
Downstream
Published
2026-09-17T16:10:45Z
Modified
2026-09-18T03:48:43Z
Summary
scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context

TX EQTR may run while devfreq gear scaling has quiesced the UFS tagset. In that context, functions ufshcd_tx_eqtr(), __ufshcd_tx_eqtr() and ufs_qcom_get_rx_fom() allocate memory with GFP_KERNEL. If direct reclaim is triggered, reclaim/writeback can depend on I/O to UFS device. Because the queue is quiesced, this can cause deadlock.

Use memalloc_noio_save/restore() in ufshcd_tx_eqtr() to cover all allocations in the TX EQTR call tree, including:

  • params->eqtr_record in ufshcd_tx_eqtr()

  • eqtr_data in __ufshcd_tx_eqtr()

  • params in ufs_qcom_get_rx_fom()

This is preferred over tagging individual call sites with GFP_NOIO, as it automatically covers any future allocations added anywhere in the call tree without requiring each caller to be aware of this constraint.

[mkp: fix label as suggested by Bart]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93057.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
03e5d38e2f985d8d0b0a60508c0b422f664808e3
Fixed
a28a7d9b3bb116da788ae492c90465ec1a7fa6e8
Fixed
760fc6f0e25a72832c2fcf37ecf5f1b770ec8374

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93057.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.1.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93057.json"