CVE-2026-89998

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists when loading and unloading a table. This occurs if userspace initiates two concurrent table load ioctls where one succeeds and the other fails. The issue arises because the dm setup md queue() function iterates through &md->table devices without a lock. If this process races with the sequence dm table destroy -> free devices -> dm put table device(), it can lead to access of invalid memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.