CVE-2026-89584
block: validate user space vectors during extraction
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.2.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate user vectors against the device's dma_alignment as the bio is built from the iov_iter, rejecting misaligned early with -EINVAL.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 5ff3f74e145adc79b49668adb8de276446acf6be · fixed in d44a97a3b1c00cc571245124e23e5ceb0a0225a0; From 5ff3f74e145adc79b49668adb8de276446acf6be · fixed in 14b007e178811db72fbb1ebb3535160db6ec1e6a
- Linux Linux
6.18
- KernelLinux
From 6.18.0 · fixed in 7.2.4