CVE-2026-23007

An information disclosure vulnerability was found in the Linux kernel's block layer integrity handling. When auto-generating integrity buffers for writes with protection information PI enabled, the non-PI portion of the metadata buffer is left uninitialized if the metadata size exceeds the PI tup...

CVE-2026-23007

creationtimestamp| type| source ---|---|--- 2026-01-25 15:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdb2gfjl7o2n...

DEBIAN-CVE-2026-23007

In the Linux kernel, the following vulnerability has been resolved: block: zero non-PI portion of auto integrity buffer The auto-generated integrity buffer for writes needs to be fully initialized before being passed to the underlying block device, otherwise the uninitialized memory can be read...