SMP IO Deadlock in Linux Kernel Affecting Expander-Attached SATA Disks

CVE-2026-99202

What is CVE-2026-99202?

In the Linux kernel, a vulnerability has been identified that leads to a deadlock scenario when managing SCSI tasks with expander-attached SATA disks. When the system resumes after a halt, the function smp_execute_task_sg() is invoked with a synchronous request that can block the High Availability (HA) resume path. This occurs because it waits on a resume process already in progress, thereby causing a deadlock situation. The vulnerability specifically arises during the execution of the SMP command from the HA resume path, where incorrectly synchronized power management calls lead to a standoff between resuming the device and completing the I/O task. The resolution involves using non-blocking power management calls to avoid such dependency issues, ensuring that the system remains responsive and operational without deadlock risks during crucial operations.

References