Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-90318

fat: release buffer head after rebuilding parent

Description

In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent fat_scan_logstart() leaves the matching directory entry's buffer head in sinfo.bh for the caller to release, just like fat_scan(). fat_rebuild_parent() uses the directory entry to rebuild the parent inode for the nostale_ro NFS export path, but does not release sinfo.bh after a successful scan. Release it once fat_build_inode() has consumed the directory entry data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 5e44b6944e11fd6647f028219ad0be4e85e9aceeaffected
  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < d2a86329152c69a6200c15b2bf618755f8563826affected
  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 0f18d712ba9c980e05b7e33a27cde4fe3ed2d393affected
  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < e38587d98d1ceac608420052c0cdd901d25878f3affected
  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < c6a67aa438179cad40f8ae45469e304338d65c0aaffected
  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 571ea4263d69df1b48578e4314a828ecd0604755affected
  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 7565e44507634514e3e1899d3acad3de43f7a2c1affected
  • f1e6fb0ab451dae8523fbb8c119a653b2730e938 to < 83e98dbf19ab64e8528e101e20f8d50e1aaa68a8affected

Linux Linux

Default version status: affected

  • 3.10affected
  • 0 to < 3.10unaffected
  • 5.10.270 to ≤ 5.10.*unaffected
  • 5.15.221 to ≤ 5.15.*unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References