CVE-2026-89778

🗓️ 16 Sep 2026 08:48:18Reported by LinuxType

Out-of-bounds page array access in Linux kernel zisofs via crafted ISO9660 image.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-89778	16 Sep 202615:20	–	circl
Cvelist	CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block	16 Sep 202608:48	–	cvelist
Debian CVE	CVE-2026-89778	16 Sep 202608:48	–	debiancve
EUVD	EUVD-2026-80299	16 Sep 202608:48	–	euvd
Microsoft CVE	isofs: fix out-of-bounds page array access on empty zisofs block	17 Sep 202608:13	–	mscve
NVD	CVE-2026-89778	16 Sep 202609:17	–	nvd
OSV	DEBIAN-CVE-2026-89778	16 Sep 202609:17	–	osv
UbuntuCve	CVE-2026-89778	17 Sep 202600:00	–	ubuntucve

Vulners

CNA

Node

linux linux_kernelRange2.6.33–5.15.221

linux linux_kernelRange5.16.0–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.110

linux linux_kernelRange6.13.0–6.18.52

linux linux_kernelRange6.19.0–7.2.6

linux linux_kernelRange7.3.0–7.3-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/isofs/compress.c"
    ],
    "versions": [
      {
        "version": "59bc055211b8d266ab6089158058bf8268e02006",
        "lessThan": "8b994ac5778a725982fd6a8a3afcaa068d4a93e3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "59bc055211b8d266ab6089158058bf8268e02006",
        "lessThan": "ad3249cdf9d4ba34bb8b1ff3956a4020fdfb5b0a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "59bc055211b8d266ab6089158058bf8268e02006",
        "lessThan": "85904076cece72ee3194646ad7ac8e6659d999aa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "59bc055211b8d266ab6089158058bf8268e02006",
        "lessThan": "f03425dcbe04aec3c27b9917e97d7d23a2908dda",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "59bc055211b8d266ab6089158058bf8268e02006",
        "lessThan": "cd616aa0449a772a6956abf03358f0ff31720580",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "59bc055211b8d266ab6089158058bf8268e02006",
        "lessThan": "9c6eace8d07e90f038c89eb3b756d65a7e259d48",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "59bc055211b8d266ab6089158058bf8268e02006",
        "lessThan": "68d4d3e78150c7ed7d1195af63ad1e6ace30c661",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/isofs/compress.c"
    ],
    "versions": [
      {
        "version": "2.6.33",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.33",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.110",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.52",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.6",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/cd616aa0449a772a6956abf03358f0ff31720580
git	www.git.kernel.org/stable/c/f03425dcbe04aec3c27b9917e97d7d23a2908dda
git	www.git.kernel.org/stable/c/8b994ac5778a725982fd6a8a3afcaa068d4a93e3
git	www.git.kernel.org/stable/c/85904076cece72ee3194646ad7ac8e6659d999aa
git	www.git.kernel.org/stable/c/ad3249cdf9d4ba34bb8b1ff3956a4020fdfb5b0a
git	www.git.kernel.org/stable/c/68d4d3e78150c7ed7d1195af63ad1e6ace30c661
git	www.git.kernel.org/stable/c/9c6eace8d07e90f038c89eb3b756d65a7e259d48

16 Sep 2026 15:18Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.19.8

EPSS0.00205