SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89770

UNKNOWN · CVSS N/A EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's iomap functionality, specifically in the handling of bio integrity payloads when PI verification is disabled on block devices. This oversight can lead to NULL pointer dereferences, potentially causing system crashes or instability. Linux system administrators and developers should prioritize addressing this issue to ensure system reliability and prevent unexpected failures.

CVE
CVE-2026-89770
Severity
UNKNOWN
CVSS
N/A
EPSS
0.14%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fs_bio_integrity_alloc might not allocate a bio integrity payload if PI verification is disabled on the block device. Check for that case before calling fs_bio_integrity_free in iomap_bio_read_folio_range_sync to avoid a NULL pointer dereferences. Make the branch cover the PI verification as well - while fs_bio_integrity_verify works without an integrity payload, it requires one to actually do useful work.