CVE-2026-90229 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 nvme-apple block/blk-mq.c blk_mq_timeout_work null pointer dereference

A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been classified as problematic. Impacted is the function blk_mq_timeout_work of the file block/blk-mq.c of the component nvme-apple. Performing a manipulation results in null pointer dereference.

This vulnerability is cataloged as CVE-2026-90229. The attack must be initiated from a local position. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More