CVE-2026-90010 is a vulnerability in Linux Kernel
Published on September 16, 2026
scsi: bsg: Cap io_uring sense copy to max_response_len
In the Linux kernel, the following vulnerability has been resolved:
scsi: bsg: Cap io_uring sense copy to max_response_len
Completion copied scmd->sense_len to the user response buffer without
honoring max_response_len. After a valid sense, the midlayer sets
sense_len to the real length (up to SCSI_SENSE_BUFFERSIZE), so a smaller
user buffer was overrun.
Products Associated with CVE-2026-90010
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 7b6d3255e7f8c6df2d21504c47808e3ce84649ac and below 5d326efc334ea21afd8161f6ca53e17de71948a9 is affected.
- Version 7b6d3255e7f8c6df2d21504c47808e3ce84649ac and below ece06de726737e887dc0225c8283477624f8ae21 is affected.
- Version 7.1 is affected.
- Before 7.1 is unaffected.
- Version 7.2.5, <= 7.2.* is unaffected.
- Version 7.3-rc2, <= * is unaffected.