« Volver al listado

CVE-2026-89458

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: Do not complete a failed ESE read as successful

dasd_int_handler() completes an NRF read of an unallocated ESE track by calling ese_read() and unconditionally marking the request DASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has zeroed the destination buffer: a failed sense-data parse or a current track outside the requested range both return early, leaving the destination pages untouched. The request is still completed successfully, so the block layer is handed stale / uninitialized memory instead of zeros.

Leer descripción completaMostrar menos

Check the ese_read() return value and fail the request through the normal error path instead of forcing DASD_CQR_SUCCESS.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-89458",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "8cb96cffceead3cbd0541154d7ecc5e6474edda1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "77168af195d04b34c6de62b874624e74d64cef8d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "921ff697bb6f7067059793becf8b2d00de71ce41",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "55f4df40178cdfede0d7ae848fbab00efa9b95c1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "c9adf8399732306dfc97b3adb4778038743e3f5e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "52b331c99baac653ca794bd8487c8ec4de8db203",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e",
              "lessThan": "cddb447c62466f3076938ce120028d7b591f9f37",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5f7c9989f11305aaa43e0f4378f4f070022a9f2b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5.4.26",
              "lessThan": "5.5",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "5.5.10",
              "lessThan": "5.6",
              "versionType": "semver"
            }
          ],
          "programFiles": [
            "drivers/s390/block/dasd.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.6",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/s390/block/dasd.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-11T20:19:26.657",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/52b331c99baac653ca794bd8487c8ec4de8db203",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/55f4df40178cdfede0d7ae848fbab00efa9b95c1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/77168af195d04b34c6de62b874624e74d64cef8d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8cb96cffceead3cbd0541154d7ecc5e6474edda1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/921ff697bb6f7067059793becf8b2d00de71ce41",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c9adf8399732306dfc97b3adb4778038743e3f5e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/cddb447c62466f3076938ce120028d7b591f9f37",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Do not complete a failed ESE read as successful\n\ndasd_int_handler() completes an NRF read of an unallocated ESE track by\ncalling ese_read() and unconditionally marking the request\nDASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has\nzeroed the destination buffer: a failed sense-data parse or a current\ntrack outside the requested range both return early, leaving the\ndestination pages untouched. The request is still completed successfully,\nso the block layer is handed stale / uninitialized memory instead of\nzeros.\n\nCheck the ese_read() return value and fail the request through the normal\nerror path instead of forcing DASD_CQR_SUCCESS."
    }
  ],
  "lastModified": "2026-09-14T13:19:02.220",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}