CVE record · CVE-2026-99202

scsi: libsas: Fix SMP IO deadlock during HA resume

No CVSS scoreEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 28 Oct 2026, 10:35 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected 09357f067122e2e28ec52e27013a1660a1571618 to before ab91a558084fdb8cca4919ffb769ca4328e91bbd git affected e50a6523a603594a6d92cdecfe11997d639410a3 to before 6078a5369f9e8d22bb03b8890cb0bb47c91a5017 git affected c391b5899dd46485a5893696c12ae3e95a3a7325 to before 7004c18c38aaa2b87164b54dd77c320b4c63b89b git affected 9e24b47ef81d43b3fb1b14294f09991640c79fcc to before c9fb89246d9922ac0a45d504adb03e0bb971310c git affected 3dbbbf656b850c9c8de05df6ad4a1dfc6ff02845 to before 08b95ef36a64c3ae4490794bed3c35d0c3354e85 git affected 3dbbbf656b850c9c8de05df6ad4a1dfc6ff02845 to before 81e097a064b28b4a1f6ca1a8b433e659c1bd64c0 git affected b9c44a14062093e9fc2d6bddc696cfceadb482d7 git affected 6.1.183 to before 6.1.191 semver affected 6.6.151 to before 6.6.161 semver affected 6.12.103 to before 6.12.115 semver affected 6.18.44 to before 6.18.59 semver affected 7.1.8 to before 7.2 semver Other versions: unaffected
Linux	Linux	affected 7.2 unaffected before 7.2 semver unaffected 6.1.191 to 6.1., inclusive semver unaffected 6.6.161 to 6.6., inclusive semver unaffected 6.12.115 to 6.12., inclusive semver unaffected 6.18.59 to 6.18., inclusive semver unaffected 7.2.13 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-99202
CNA: Linux
Tags: Linux kernel
Published: 28 Oct 2026
Updated: 30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0017, the 6th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 28 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.