{"id":"CVE-2026-89584","revision":"6ce8485cfc9f44c69670301095ee222c","records":[{"revision":"6ce8485cfc9f44c69670301095ee222c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89584","aliases":[],"title":"block: validate user space vectors during extraction","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nblock: validate user space vectors during extraction\n\nThe bio-based drivers don't necessarily check the alignment split, and\nstacking block drivers don't always handle a misalignment detected after\nsubmitting the bio. Validate user vectors against the device's\ndma_alignment as the bio is built from the iov_iter, rejecting\nmisaligned early with -EINVAL.","state":0,"publishedAt":"2026-09-11T19:44:49.838+00:00","modifiedAt":"2026-10-19T08:49:17.054+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"block/bio.c\",\n                        \"block/blk-map.c\",\n                        \"block/fops.c\",\n                        \"fs/iomap/direct-io.c\",\n                        \"include/linux/bio.h\",\n                        \"include/linux/uio.h\",\n                        \"lib/iov_iter.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5ff3f74e145adc79b49668adb8de276446acf6be\",\n                            \"lessThan\": \"d44a97a3b1c00cc571245124e23e5ceb0a0225a0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5ff3f74e145adc79b49668adb8de276446acf6be\",\n                            \"lessThan\": \"14b007e178811db72fbb1ebb3535160db6ec1e6a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"block/bio.c\",\n                        \"block/blk-map.c\",\n                        \"block/fops.c\",\n                        \"fs/iomap/direct-io.c\",\n                        \"include/linux/bio.h\",\n                        \"include/linux/uio.h\",\n                        \"lib/iov_iter.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.18\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.18\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.4\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/d44a97a3b1c00cc571245124e23e5ceb0a0225a0","https://git.kernel.org/stable/c/14b007e178811db72fbb1ebb3535160db6ec1e6a"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89584","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89584","identifiers":["CVE-2026-89584"]},"retained":false,"historicalAffected":[]}],"coverage":[]}