CVE-2026-98478: Linux kernel · scsi: ufs: core: Keep internal commands dispatchable during error handling
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to b52d695d062095327b944acf7daabbc816ab319b or 9f6f4840def931814c106fc800f57a2d26befee6 when convenient.
Data as of 26 Oct 2026, 17:16 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in b52d695d062095327b944acf7daabbc816ab319b, 9f6f4840def931814c106fc800f57a2d26befee6
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to b52d695d062095327b944acf7daabbc816ab319b or 9f6f4840def931814c106fc800f57a2d26befee6.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix has been implemented in the Linux kernel as indicated by the fixed commit versions. Users should update to the patched kernel versions containing commits b52d695d062095327b944acf7daabbc816ab319b and 9f6f4840def931814c106fc800f57a2d26befee6. No additional mitigation is required beyond applying the official fix.
Description
A deadlock vulnerability in the Linux kernel's UFS SCSI core was fixed by ensuring internal commands remain dispatchable during error handling. The issue involved internal commands being blocked due to the entire tagset being quiesced, causing unrecoverable circular wait deadlocks during error recovery. The fix balances quiescing and unquiescing of the pseudo SCSI device and the tagset to maintain command dispatch while logical units remain quiesced.