CVE-2026-90209

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/debug: Fix deadlock during unregister

Unregistering an s390dbf debug area while one of the associated debugfs files is being written to can cause a deadlock:

$ echo >.../vmur/level $ rmmod vmur =================================================== debugfs write debugfs_file_get() debug_unregister() mutex_lock(debug_mutex) debugfs_remove() wait for debugfs_file_put() debug_file_ops.write() debug_input() mutex_lock(debug_mutex) ==> DEADLOCK

Fix this by splitting debug_unregister() into an s390dbf and debugfs part, and running only the s390dbf part with debug_mutex locked.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 9372a82892c2caa6bccab9a4081166fa769699f8, < a214c3dacc779b2afcb0ac9c8001e45ee4ffb2ed; >= 9372a82892c2caa6bccab9a4081166fa769699f8, < 183f8f6d64bb0510070c856b9927618c53014a7b; >= 9372a82892c2caa6bccab9a4081166fa769699f8, < a08b70ed2d1ec907353a72f15163b8e34ff4b2f8; >= 9372a82892c2caa6bccab9a4081166fa769699f8, < 45bb341d1b73eb293e0dd43d9b72bbc8b615d0ba; >= 9372a82892c2caa6bccab9a4081166fa769699f8, < 5d83f3faa3fb7f23f298cfd40382611999de5d1d; >= 9372a82892c2caa6bccab9a4081166fa769699f8, < 54e1259b75d6402a1d0cfb822b9bb2c507e53dab; >= 9372a82892c2caa6bccab9a4081166fa769699f8, < 445c31ac638fd1af203d79bdf25fc0cb3149fbbc; c68ba4a708fbd0efdc384cd29250bb292a45e559; 86f9980909f31ab205323eeeb290fe3cbb4952b4; fe5793e90d3f572a87ba67fe2f0e1679fdff14f8; e234f66168f0d50c0d28154fb983a14e85c3c526; >= 5.4.146, < 5.5; >= 5.10.65, < 5.11; >= 5.13.17, < 5.14; >= 5.14.4, < 5.15
LinuxLinux5.15

References

Timeline

Published
Sep 17, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-90215.3The Easy Invoice plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.19. This is due to the plCVE-2026-902107.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure WheCVE-2026-90211In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missiCVE-2026-90212In the Linux kernel, the following vulnerability has been resolved: arm64/efi: Avoid voluntary preemption with efi_mm installed Gus reportCVE-2026-90213In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix memory leak in error path of build_tree() In the eCVE-2026-90214In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error In xlnCVE-2026-90215In the Linux kernel, the following vulnerability has been resolved: mtd: ubi: Release device reference on busy detach ubi_detach_mtd_dev()CVE-2026-90216In the Linux kernel, the following vulnerability has been resolved: ubi: Fix rollback for explicit UBI device numbers ubi_init_attach() roCVE-2026-902177.8In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack sloCVE-2026-90218In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix WARNING in res_to_rt syzbot reported a WARN_ON(!res->devCVE-2026-90219In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iw_alloc() creates CVE-2026-90226.4The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to,