SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89584

HIGH · CVSS 7.8 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects bio-based drivers, which may not properly validate user space vectors during data extraction, potentially leading to misalignment issues. This can result in data corruption or unexpected behavior when interacting with block devices. Organizations using Linux systems, particularly those relying on bio-based drivers, should prioritize addressing this vulnerability to ensure data integrity and system stability.

CVE
CVE-2026-89584
Severity
HIGH
CVSS
7.8
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate user vectors against the device's dma_alignment as the bio is built from the iov_iter, rejecting misaligned early with -EINVAL.