{"id":"CVE-2026-98478","title":"kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling (CVE-2026-98478)","summary":"A flaw was found in the Linux kernel's Universal Flash Storage (UFS) driver. During device error recovery, the driver pauses all command queues, which inadvertently prevents internal recovery commands from being dispatched. This condition …","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-833","vendor":"Red Hat","product":"Linux","affected":["Linux >= 08b12cda6c44dc015bcc152613c35ee0ae8f37b9 < 9f6f4840def931814c106fc800f57a2d26befee6","Linux >= 08b12cda6c44dc015bcc152613c35ee0ae8f37b9 < b52d695d062095327b944acf7daabbc816ab319b","Linux 6.19"],"published":"2026-10-18","updated":"2026-10-20","sourceUpdated":"2026-10-20T11:40:40+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98478.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98478.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98478"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554899"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98478"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98478"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98478.mbox"},{"url":"https://git.kernel.org/stable/c/9f6f4840def931814c106fc800f57a2d26befee6"},{"url":"https://git.kernel.org/stable/c/b52d695d062095327b944acf7daabbc816ab319b"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00173,"epssPercentile":0.06653,"ingestedAt":"2026-10-18T15:45:12.297Z","slug":"CVE-2026-98478","body":"## Overview\n\nA flaw was found in the Linux kernel's Universal Flash Storage (UFS) driver. During device error recovery, the driver pauses all command queues, which inadvertently prevents internal recovery commands from being dispatched. This condition can result in an unrecoverable circular wait deadlock, leading to a Denial of Service (DoS) through a system hang.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98478.json)\n\n**kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":225505,"id":"CVE-2026-98478","ts":1792498274087,"field":"cvss","old":null,"new":"4.7"},{"seq":225504,"id":"CVE-2026-98478","ts":1792498274087,"field":"severity","old":"none","new":"medium"}]}