In the Linux kernel, the following vulnerability has been resolved:

md/raid5-ppl: fix use-after-free in ppl_do_flush()

The loop in ppl_do_flush() continues iterating after calling
ppl_io_unit_finished(), touching io->pending_flushes and leading to a
use-after-free.

Add a break statement to stop the loop once io is freed.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < cf01f9413565e86673baf927291a088b6975692b
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < e7505842f1329ece90cb9ea0db87772aeca44052
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < b5123bf667ac29ddd8106f9ca7cc01316513ae66
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < e77c80670f2c2bf491da9b173931e1da4677c23a
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < 8914c3d40870f16429a326e97e4016bedc6ede4c
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < 455b56209f9615c3902dcc398dd867abb5ade3ab
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < fcf21df7d3c50c8ebeb0757df5d21b02dcae4218
1532d9e87e8b2377f12929f9e40724d5fbe6ecc5 affected < 371f7a1b392edc8b7cf449cc7713179b588f2d0e
Linux Linux affected
Version Status Constraints
4.16 affected —
0 unaffected < 4.16
5.10.270 unaffected ≤ 5.10.*
5.15.221 unaffected ≤ 5.15.*
6.1.188 unaffected ≤ 6.1.*
6.6.157 unaffected ≤ 6.6.*
6.12.110 unaffected ≤ 6.12.*
6.18.52 unaffected ≤ 6.18.*
7.2.6 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/371f7a1b392edc8b7cf449cc7713179b588f2d0e cve-icon cve-icon
https://git.kernel.org/stable/c/455b56209f9615c3902dcc398dd867abb5ade3ab cve-icon cve-icon
https://git.kernel.org/stable/c/8914c3d40870f16429a326e97e4016bedc6ede4c cve-icon cve-icon
https://git.kernel.org/stable/c/b5123bf667ac29ddd8106f9ca7cc01316513ae66 cve-icon cve-icon
https://git.kernel.org/stable/c/cf01f9413565e86673baf927291a088b6975692b cve-icon cve-icon
https://git.kernel.org/stable/c/e7505842f1329ece90cb9ea0db87772aeca44052 cve-icon cve-icon
https://git.kernel.org/stable/c/e77c80670f2c2bf491da9b173931e1da4677c23a cve-icon cve-icon
https://git.kernel.org/stable/c/fcf21df7d3c50c8ebeb0757df5d21b02dcae4218 cve-icon cve-icon
History

Thu, 24 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppl_do_flush() The loop in ppl_do_flush() continues iterating after calling ppl_io_unit_finished(), touching io->pending_flushes and leading to a use-after-free. Add a break statement to stop the loop once io is freed.
Title md/raid5-ppl: fix use-after-free in ppl_do_flush()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-24T15:52:01.886Z

Reserved: 2026-09-17T16:02:15.097Z

Link: CVE-2026-93262

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T16:17:22.927

Modified: 2026-09-24T16:17:22.927

Link: CVE-2026-93262

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.