SECUFOCUSNOW
Home›CVE index›CVE-2026-80589
ReviewCritical

CVE-2026-80589

Linux

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk disk_release() undoes blk_mq_init_allocated_queue() for a disk whose probe failed before add_disk(), but it only calls blk_mq_exit_queue(). Nothing there stops q->timeout, and that timer rolls forward: it stays pending until it next expires, not until the last request completes. So if the driver issued any I/O before adding the disk, the request_queue is freed while still linked into a timer wheel bucket. Commit 6f8191fdf41d ("block: simplify disk shutdown") dr...

CVSS
9.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.08.27
PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 9.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk disk_release() undoes blk_mq_init_allocated_queue() for a disk whose probe failed before add_disk(), but it only calls blk_mq_exit_queue(). Nothing there stops q->timeout, and that timer rolls forward: it stays pending until it next expires, not until the last request completes. So if the driver issued any I/O before adding the disk, the request_queue is freed while still linked into a timer wheel bucket. Commit 6f8191fdf41d ("block: simplify disk shutdown") dr...

Affected product and versions

Product
Linux
Affected versions
>= 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 < 6ae7364f68e6c7af6b6df4bbb14040b89e5975d0, >= 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 < 6f06dbe5012c160e0dba418a5a9cb16c456ad46a, >= 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 < 1a0ae4d502062a2759f2a92d12bdeab3c64c7372, >= 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 < bb03b56d1d754908a37a160603be21769da423cf, >= 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 < 93d620519d71dfc6ee64b5baea74f1d85d4439fb, >= 6f8191fdf41d3a53cc1d63fe2234e812c55a0092 < 26cb8ebbfaf713c82e142d08828d4d765057633b, >= d27b66257db183fe11c10f31246ae965adb005d3, >= 5.19.12 < 5.20, >= 6.0
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available