CVE-2026-90031

A flaw was found in the Linux kernel's usb-storage component, specifically within the ene_ub6250 driver. A race condition exists between the delayed scan work and the ene_get_card_type() probe function. This occurs because both operations attempt to use the same Universal Serial Bus (USB) Request Block (URB) without proper synchronization. If the scan work runs while ene_get_card_type() is still using the URB, it can lead to the URB being submitted while already active, potentially causing system instability or a denial of service.

This vulnerability is rated as Low severity because exploitation requires an attacker to connect a specialized ENE UB6250 USB card reader peripheral to the host or configure an emulated USB device in a virtualized guest. Typical Red Hat Enterprise Linux server and cloud deployments do not utilize this specific hardware reader, significantly limiting exposure. Furthermore, the timing window is restricted to initial device probing, and successful triggering results in a kernel warning or localized denial of service without compromising system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.