https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 03 Nov 2026 22:43:54 +0000 https://db.gcve.eu/vuln/cve-2026-98820 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>blk-mq: set RQF_USE_SCHED when the operation is known</p> <p>The cached requests are allocated for one operation but can be handed out for another. A passthrough command has RQF_USE_SCHED cleared, so using those flags for a subsequent read/write bio will insert it into the scheduler without -&gt;prepare_request() and frees it without -&gt;finish_request(). For kyber, this leaks the domain token acquired at dispatch and stalls the queue.</p> <p>Don&#39;t set RQF_USE_SCHED based on the first operation the batch happened to be allocated for. Instead, set it after the request is claimed by an operation. Introduce a helper function, blk_mq_rq_late_init() for this, and absorb blk_mq_rq_time_init() since the two run together.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>blk-mq: set RQF_USE_SCHED when the operation is known</p> <p>The cached requests are allocated for one operation but can be handed out for another. A passthrough command has RQF_USE_SCHED cleared, so using those flags for a subsequent read/write bio will insert it into the scheduler without -&gt;prepare_request() and frees it without -&gt;finish_request(). For kyber, this leaks the domain token acquired at dispatch and stalls the queue.</p> <p>Don&#39;t set RQF_USE_SCHED based on the first operation the batch happened to be allocated for. Instead, set it after the request is claimed by an operation. Introduce a helper function, blk_mq_rq_late_init() for this, and absorb blk_mq_rq_time_init() since the two run together.</p> https://db.gcve.eu/vuln/cve-2026-98820