Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-89584

block: validate user space vectors during extraction

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate user vectors against the device's dma_alignment as the bio is built from the iov_iter, rejecting misaligned early with -EINVAL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5ff3f74e145adc79b49668adb8de276446acf6be to < d44a97a3b1c00cc571245124e23e5ceb0a0225a0affected
  • 5ff3f74e145adc79b49668adb8de276446acf6be to < 14b007e178811db72fbb1ebb3535160db6ec1e6aaffected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 7.2.4 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References