Use-after-free Vulnerability in Linux Kernel Affects Multiple Versions

CVE-2026-93262

What is CVE-2026-93262?

A vulnerability exists in the Linux kernel's RAID subsystem, specifically in the function ppl_do_flush(). In this context, the loop continues to execute even after the I/O unit has been freed, creating a possibility of dereferencing freed memory. This flaw results in potential data corruption or system instability. A proper fix has been implemented by introducing a break statement that terminates the loop once the I/O structure is no longer valid.

References