Log in Start free

Vulnerability · Published Sep 17, 2026 · Assigned by Linux

CVE-2026-90227nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 93.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls nvme_cmd_allowed(). Unprivileged callers can thus issue I/O on a partition device or write through a read-only file descriptor. Pass flags and open_for_write through and reject disallowed commands with -EACCES.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-64k6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-debug6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-debug-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-abi-stablelists6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-abi-stablelists4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-core4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-cross-headers6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-cross-headers4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-debug6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-debug4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-debug-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-debug-core4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-debug-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-debug-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-debug-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-debug-modules4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-debug-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-devel-matched6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-doc6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-doc4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-headers6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-headers4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-modules4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-modules-extra4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-64k6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-core4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-debug6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-debug4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-debug-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-debug-core4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-devel4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-modules4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-rt-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:10kernel-tools6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-tools4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-tools-libs6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-tools-libs4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-uki-virt6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-zfcpdump6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-zfcpdump4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10libperf6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10perf6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8perf4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10python3-perf6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:8python3-perf4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:10rtla6.12.0-211.63.1.el10_2ALSA-2026:76738
AlmaLinux:10rv6.12.0-211.63.1.el10_2ALSA-2026:76738
Debian:12linuxno fix listedDEBIAN-CVE-2026-90227
Debian:13linux6.12.111-1DEBIAN-CVE-2026-90227
Debian:14linux7.2.6-1DEBIAN-CVE-2026-90227
Debian:12linux-6.126.12.111-1~deb12u1DEBIAN-CVE-2026-90227
Rocky Linux:8kernel0:4.18.0-553.171.1.el8_10RLSA-2026:75747
Rocky Linux:8kernel-rt0:4.18.0-553.171.1.rt7.512.el8_10RLSA-2026:75746
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-90227
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-90227
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-90227
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-90227

Affected products (as reported)

VendorProductVersions
Linux Linux a53295b6998f62d961c29e54051c1cf1d738c2b3 – before c35cd98eed1a863e8dd51073953563cd8c907f68a53295b6998f62d961c29e54051c1cf1d738c2b3 – before 95b0591d51dbf9e618d7845883d535e88ad7c8afa53295b6998f62d961c29e54051c1cf1d738c2b3 – before 736b7c6adc7a65c4411beff197b6a634f7a6ca27a53295b6998f62d961c29e54051c1cf1d738c2b3 – before b116e9dae433ff631f94c36c61a7a78fe400ed1ea53295b6998f62d961c29e54051c1cf1d738c2b3 – before b53d495c7f0db46b6748b5ade48371a10dd5d3bc
Linux Linux 3.3

References