# scsi: libsas: Fix SMP IO deadlock during HA resume

CVE record · `CVE-2026-99202`

- **Identifiers:** `CVE-2026-99202`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 28 Oct 2026
- **Updated:** 30 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 28 Oct 2026, 10:35 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `09357f067122e2e28ec52e27013a1660a1571618 to before ab91a558084fdb8cca4919ffb769ca4328e91bbd` (git)
  - affected: `e50a6523a603594a6d92cdecfe11997d639410a3 to before 6078a5369f9e8d22bb03b8890cb0bb47c91a5017` (git)
  - affected: `c391b5899dd46485a5893696c12ae3e95a3a7325 to before 7004c18c38aaa2b87164b54dd77c320b4c63b89b` (git)
  - affected: `9e24b47ef81d43b3fb1b14294f09991640c79fcc to before c9fb89246d9922ac0a45d504adb03e0bb971310c` (git)
  - affected: `3dbbbf656b850c9c8de05df6ad4a1dfc6ff02845 to before 08b95ef36a64c3ae4490794bed3c35d0c3354e85` (git)
  - affected: `3dbbbf656b850c9c8de05df6ad4a1dfc6ff02845 to before 81e097a064b28b4a1f6ca1a8b433e659c1bd64c0` (git)
  - affected: `b9c44a14062093e9fc2d6bddc696cfceadb482d7` (git)
  - affected: `6.1.183 to before 6.1.191` (semver)
  - affected: `6.6.151 to before 6.6.161` (semver)
  - affected: `6.12.103 to before 6.12.115` (semver)
  - affected: `6.18.44 to before 6.18.59` (semver)
  - affected: `7.1.8 to before 7.2` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `7.2`
  - unaffected: `before 7.2` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.161 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.115 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.59 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.13 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0017, the 6th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 28 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-99202](https://www.cve.org/CVERecord?id=CVE-2026-99202)
- [NVD: CVE-2026-99202](https://nvd.nist.gov/vuln/detail/CVE-2026-99202)

### References from the CNA

- <https://git.kernel.org/stable/c/ab91a558084fdb8cca4919ffb769ca4328e91bbd>
- <https://git.kernel.org/stable/c/6078a5369f9e8d22bb03b8890cb0bb47c91a5017>
- <https://git.kernel.org/stable/c/7004c18c38aaa2b87164b54dd77c320b4c63b89b>
- <https://git.kernel.org/stable/c/c9fb89246d9922ac0a45d504adb03e0bb971310c>
- <https://git.kernel.org/stable/c/08b95ef36a64c3ae4490794bed3c35d0c3354e85>
- <https://git.kernel.org/stable/c/81e097a064b28b4a1f6ca1a8b433e659c1bd64c0>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-99202>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-99202/>. Everything for agents: <https://agentprime.io/llms.txt>.