CVE Database›Document archive›CVE-2026-90183

CVE-2026-90183

kernel: blk-iolatency: clear delay state when freeing policy data

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 6, 2026

Description

A flaw was found in the Linux kernel's blk-iolatency controller. This vulnerability occurs when the I/O latency controller incorrectly handles the clearing of delay states for I/O groups, particularly when a group without a specific latency target is throttled. This oversight can lead to a situation where I/O operations for tasks within an affected control group (cgroup) are persistently throttled, significantly degrading system performance and potentially causing a Denial of Service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime