Log in Start free

Vulnerability · Published Sep 17, 2026 · Assigned by Linux

CVE-2026-92479scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 90.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags The single-doorbell completion path can call ufshcd_compl_one_cqe() with a NULL CQE. If no command is associated with the completion tag, the warning message dereferences the CQE while reporting the error. Avoid that dereference and include the invalid tag in the warning.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:14linux7.2.6-1DEBIAN-CVE-2026-92479
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-92479
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-92479
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-92479
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-92479

Affected products (as reported)

VendorProductVersions
Linux Linux 22089c218037ca7cd50d4fa20e8b5bd746a9b397 – before a769095d1d74ebac2b1474c56bbd29bb0b9ed5a722089c218037ca7cd50d4fa20e8b5bd746a9b397 – before 331bda797e6afc143127ce72b1469d73316f49b4
Linux Linux 6.19

References