CVE-2026-89575

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm raid1: reserve space for NUL-terminator in build_constructor_string()

Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf().

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f5db4af466e2dca0fe822019812d586ca910b00c, < 35ba81c93fe7392c973af9881640180490e76f34; >= f5db4af466e2dca0fe822019812d586ca910b00c, < 1fcc9f9f35653c5ee1a8b144ec96ff3fc48532f7; >= f5db4af466e2dca0fe822019812d586ca910b00c, < 7b035983b895db3ae01d9855963d42541db42125; >= f5db4af466e2dca0fe822019812d586ca910b00c, < 01a0276706c7b6fb758a8e2ff9cf221a3dfcae97; >= f5db4af466e2dca0fe822019812d586ca910b00c, < 0a3657ebd6b517b60cdc5123894047616974e25b; >= f5db4af466e2dca0fe822019812d586ca910b00c, < 644140527ae494cedf3b5c0ecd16287deaea7a66; >= f5db4af466e2dca0fe822019812d586ca910b00c, < f79b53ca3a68a46c6fc3b30b148d1dfb1b33ea8b; >= f5db4af466e2dca0fe822019812d586ca910b00c, < 73c37fe54cd056d07461b142ab0b8b81e1ef6ad8
LinuxLinux2.6.31

References

Timeline

Published
Sep 11, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-89576In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata_takCVE-2026-89577In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLK_STSCVE-2026-89578In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DM_IO_BICVE-2026-895797.8In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom_mCVE-2026-89588.6Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ECVE-2026-895807.8In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_perf_callchain() returnCVE-2026-895817.8In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register TheCVE-2026-89582In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() error path bnx2x_init_CVE-2026-895838.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_data() eir_get_serviceCVE-2026-895847.8In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based driCVE-2026-895857.8In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure WitCVE-2026-895868.2In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
CVE-2026-89575: Unscored | Vulnix