{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-98478 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2026-98478 is a denial of service vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-98478 and fix it if it is affected.\n\nWhat it is: CVE-2026-98478 is a denial of service vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-98478 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-98478/ (Markdown: https://insights.sbomify.com/CVE-2026-98478/index.md)","id":"CVE-2026-98478","markdown":"https://insights.sbomify.com/CVE-2026-98478/index.md","name":"CVE-2026-98478","record":{"aliases":["DEBIAN-CVE-2026-98478","GHSA-56m6-r6q3-6xw7","UBUNTU-CVE-2026-98478"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Linux kernel UFS driver","requires_auth":"none","summary":"A deadlock in the Linux kernel UFS driver during error handling causes a denial of service by preventing internal command dispatch.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: Keep internal commands dispatchable during error handling\n\nCommit 08b12cda6c44 (\"scsi: ufs: core: Switch to scsi_get_internal_cmd()\")\nswitched UFS internal commands to allocate requests on\nhba-\u003ehost-\u003epseudo_sdev-\u003erequest_queue, which shares the host tagset with\nregular LUNs.\n\nDuring error recovery, ufshcd_err_handling_prepare() calls\nblk_mq_quiesce_tagset(\u0026hba-\u003ehost-\u003etag_set), marking all queues in the\ntagset as quiesced, including pseudo_sdev-\u003erequest_queue. When\nufshcd_verify_dev_init() subsequently issues internal commands (e.g. NOP\nOUT UPIU) via blk_execute_rq(), blk_mq_run_hw_queue() skips running the\nquiesced queue, resulting in an unrecoverable circular wait deadlock.\n\nKeep quiescing the tagset and unquiesce the pseudo SCSI device on top of\nthat, so internal commands stay dispatchable while the logical units remain\nquiesced. Re-quiesce the pseudo device before unquiescing the tagset so\nthat quiesce_depth stays balanced.\n\nClock scaling and ufshcd_pause_command_processing() are unaffected: they\nkeep quiescing the whole tagset, internal commands included.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"scsi: ufs: core: Keep internal commands dispatchable during error handling","id":"CVE-2026-98478","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"denial_of_service","year":"2026"},"n_packages":0,"n_references":2,"next":{"headline":"scsi: libiscsi_tcp: Check the data direction of a Data-In PDU","id":"CVE-2026-98479"},"packages":[],"prev":{"headline":"perf/core: Fix NULL pmu_ctx passed to pmu-\u003esched_task()","id":"CVE-2026-98477"},"products":["Linux"],"published":"2026-10-18","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-10-19","vendors":["Linux"]},"summary":"A deadlock in the Linux kernel UFS driver during error handling causes a denial of service by preventing internal command dispatch.","url":"https://insights.sbomify.com/CVE-2026-98478/"}