CVE-2026-92479: scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags The single-doorbell completion path can call ufshcd_compl_one_cqe() with a NULL CQE. If no command is associated with the completion tag, the warning message dereferences the CQE while reporting the error. Avoid that dereference and include the invalid tag in the warning.

Affected products

Linux kernel: 6.19 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/331bda797e6afc143127ce72b1469d73316f49b4
https://git.kernel.org/stable/c/a769095d1d74ebac2b1474c56bbd29bb0b9ed5a7

Get alerted when CVE-2026-92479 or the next vulnerability affects your stack