{"id":25599,"date":"2026-09-18T04:31:36","date_gmt":"2026-09-17T20:31:36","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90190"},"modified":"2026-09-18T04:31:36","modified_gmt":"2026-09-17T20:31:36","slug":"cve-2026-90190","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90190","title":{"rendered":"CVE-2026-90190 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnull_blk: use DEFINE_"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>null_blk: use DEFINE_MUTEX for the file-scope mutex<\/p>\n<p>In null_init(), mutex_init(&amp;lock) currently happens after<br \/>\nconfigfs_register_subsystem(), which exposes the nullb subsystem to<br \/>\nuserspace. A racing mkdir() into \/sys\/kernel\/config\/nullb\/ can reach<br \/>\nnull_find_dev_by_name() -&gt; mutex_lock(&amp;lock) before the mutex is<br \/>\ninitialized, trigger warning:<\/p>\n<p>[  123.137788] DEBUG_LOCKS_WARN_ON(lock-&gt;magic != lock)<br \/>\n[  123.137796] WARNING: kernel\/locking\/mutex.c:159 at mutex_lock+0x171\/0x1c0, CPU#13: mkdir\/1301<br \/>\n[  123.140090] Modules linked in: null_blk(+) nft_fib_inet nft_fib_ipv4<br \/>\n&#8230;&#8230;<br \/>\n[  123.154926] Call Trace:<br \/>\n[  123.155172]<br \/>\n[  123.155419]  ? __pfx_mutex_lock+0x10\/0x10<br \/>\n[  123.156181]  ? __pfx__raw_spin_lock+0x10\/0x10<br \/>\n[  123.156571]  nullb_group_make_group+0x20\/0x100 [null_blk]<br \/>\n[  123.157011]  configfs_mkdir+0x47b\/0xc70<br \/>\n[  123.157337]  ? __pfx_configfs_mkdir+0x10\/0x10<br \/>\n[  123.157719]  ? may_create_dentry+0x242\/0x2e0<br \/>\n[  123.158061]  vfs_mkdir+0x2a9\/0x6c0<br \/>\n[  123.158352]  filename_mkdirat+0x3dc\/0x500<br \/>\n[  123.158710]  ? __pfx_filename_mkdirat+0x10\/0x10<br \/>\n[  123.159070]  ? strncpy_from_user+0x3a\/0x1d0<br \/>\n[  123.159413]  __x64_sys_mkdir+0x6b\/0x90<br \/>\n[  123.159760]  do_syscall_64+0xea\/0x600<\/p>\n<p>Replace the runtime mutex_init(&amp;lock) with a static DEFINE_MUTEX(lock)<br \/>\ndeclaration to fix this issue.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>null_blk: use DEFINE_MUTEX for the file-scope mutex<\/p>\n<p>In null_init(), mutex_init(&amp;lock) currently happens after<br \/>\nconfigfs_register_su<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25599","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}