Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-90434

isofs: release zisofs block pointer buffer head

No CVSS scoreEPSS 0.0022 · 12th percentile

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:09 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before dbcc7d1b818162aeab2e97fd217d86546d9fde15 git
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before ec33e6b7a1de20d7e623b12633191a855445657d git
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before 0c2c54a7d174edc845f7bae24179fe72a926d10f git
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before 5677737c2cedf417c0fcf61540b9cef0e62273d4 git
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before f2a1611065c700a374b31c5cc8a7587f5e3bfe73 git
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before 106e1a3b2b3454fbda63a59e9290cb9a253f81aa git
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before 3371d30a97a257b7b5f2c8009612e9d452180f0a git
  • affected 59bc055211b8d266ab6089158058bf8268e02006 to before 2f7dd9b86fe4076059e6a4a2a2c5d565afd76b9e git
Other versions: unaffected
Linux Linux
  • affected 2.6.33
  • unaffected before 2.6.33 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.52 to 6.18.*, inclusive semver
  • unaffected 7.2.6 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-90434
CNA
Linux
Tags
Published
17 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0022, the 12th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.