Race Condition in Linux Kernel USB Storage Driver Affecting ENE Devices

CVE-2026-90031

What is CVE-2026-90031?

A race condition vulnerability exists in the USB storage driver of the Linux kernel, specifically affecting the ENE ub6250 device. The issue arises during the probe process where both the delayed scan operation and the command to determine the card type can access shared resources simultaneously without proper synchronization, potentially leading to unexpected behaviors and instability. This vulnerability can be mitigated by synchronizing access with appropriate mutex locks to ensure that these operations do not interfere with each other, thus maintaining system reliability and performance.

References