PT-2026-94550 · Linux · Linux Kernel

CVE-2026-90202

·

Published

2026-09-17

·

Updated

2026-09-24

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the mpt3sas SCSI driver where the base release memory pools() function unconditionally frees every entry in the ioc->pcie sg lookup[] array. This includes entries that were never allocated following a partial failure during the setup loop, which can lead to a NULL pointer dereference or a bad DMA warning on debug kernels.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-102899
CVE-2026-90202
OPENSUSE-SU-2026:11880-1

Affected Products

Linux Kernel