---
id: CVE-2026-98478
title: >-
  kernel: scsi: ufs: core: Keep internal commands dispatchable during error
  handling (CVE-2026-98478)
summary: >-
  A flaw was found in the Linux kernel's Universal Flash Storage (UFS) driver.
  During device error recovery, the driver pauses all command queues, which
  inadvertently prevents internal recovery commands from being dispatched. This
  condition …
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe: CWE-833
vendor: Red Hat
product: Linux
affected:
  - >-
    Linux >= 08b12cda6c44dc015bcc152613c35ee0ae8f37b9 <
    9f6f4840def931814c106fc800f57a2d26befee6
  - >-
    Linux >= 08b12cda6c44dc015bcc152613c35ee0ae8f37b9 <
    b52d695d062095327b944acf7daabbc816ab319b
  - Linux 6.19
published: '2026-10-18'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T11:40:40+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98478.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98478.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98478'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2554899'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98478'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98478'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98478.mbox
  - url: 'https://git.kernel.org/stable/c/9f6f4840def931814c106fc800f57a2d26befee6'
  - url: 'https://git.kernel.org/stable/c/b52d695d062095327b944acf7daabbc816ab319b'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00173
epssPercentile: 0.06653
ingestedAt: '2026-10-18T15:45:12.297Z'
---

## Overview

A flaw was found in the Linux kernel's Universal Flash Storage (UFS) driver. During device error recovery, the driver pauses all command queues, which inadvertently prevents internal recovery commands from being dispatched. This condition can result in an unrecoverable circular wait deadlock, leading to a Denial of Service (DoS) through a system hang.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98478.json)

**kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

## Remediation

Refer to the advisory for fix availability.