OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89998

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's device mapper (dm) functionality, specifically during concurrent loading and unloading of table ioctls, which can lead to a race condition and potential access to invalid memory. This flaw could result in system instability or crashes, making it critical for organizations utilizing Linux systems, particularly those relying on device mapping features, to prioritize patching. System administrators and security teams should assess their environments for affected kernel versions and apply the necessary updates to mitigate this risk.

CVE
CVE-2026-89998
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dm_setup_md_queue walks &md->table_devices without any lock. If the walk races with dm_table_destroy -> free_devices -> dm_put_table_device, there is access to invalid memory. Fix this race by extending the lock over the list walk.