CVE-2026-90209

CVE-2026-90209

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/debug: Fix deadlock during unregister

Unregistering an s390dbf debug area while one of the associated debugfs

files is being written to can cause a deadlock:

$ echo >.../vmur/level $ rmmod vmur

===================================================

debugfs write

debugfs_file_get()

debug_unregister()

mutex_lock(debug_mutex)

debugfs_remove()

wait for debugfs_file_put()

debug_file_ops.write()

debug_input()

mutex_lock(debug_mutex) ==> DEADLOCK

Fix this by splitting debug_unregister() into an s390dbf and debugfs

part, and running only the s390dbf part with debug_mutex locked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Published
2026-09-17T21:17Z
References (7)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:07Z
    s390/debug: Fix deadlock during unregister
    cvelistv5