CVE-2026-64053 block: don't overwrite bip_vcnt in bio_integrity_copy_user()

In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bipvcnt in biointegritycopyuser biointegrityaddpage already sets bipvcnt to 1 for the bounce segment. Overwriting it with nrvecs breaks bipvcnt = bipmaxvcnt on WRITE bipmaxvcnt is 1, so the gap-merge checks...

CVE-2026-64052 block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()

In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in biointegritymapuser pinuserpagesfast can partially succeed and return the number of pages that were actually pinned. However, the biointegritymapuser does not handle this partial pinnin...

CVE-2026-64052

In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in biointegritymapuser pinuserpagesfast can partially succeed and return the number of pages that were actually pinned. However, the biointegritymapuser does not handle this partial pinnin...

CVE-2026-64019

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing...

CVE-2026-64019

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-64019 nvme-pci: fix dma mapping leak on data setup error

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing...

EUVD-2026-45592

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing...

EUVD-2026-45590

In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep after peeking a cached request, but before it pops it, the plug flushes and calls blkmqfreeplugrqs, freeing the cachedrqs. This...

CVE-2026-64017

The CVE-2026-64017 issue affects the Linux kernel’s blk-mq path. A use-after-free could occur when submitting a bio to blk-mq if a cached request is peeked and then the code path decides to sleep before popping it; a plug flush would free cached_rqs via blk_mq_free_plug_rqs. The fix pops the cach...

CVE-2026-64017 blk-mq: pop cached request if it is usable

In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep after peeking a cached request, but before it pops it, the plug flushes and calls blkmqfreeplugrqs, freeing the cachedrqs. This...

CVE-2026-63820

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...

EUVD-2026-45486

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...

CVE-2026-63820

CVE-2026-63820 relates to the Linux kernel's f2fs filesystem. The issue occurs in f2fs_read_data_large_folio(), which can keep a read bio across multiple readahead folios. If a later folio errors before any of its blocks are added to the bio, folio_in_bio is false and the path returns after endin...

CVE-2026-63820

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...

CVE-2026-63820 f2fs: fix missing read bio submission on large folio error

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...

CVE-2026-63820 f2fs: fix missing read bio submission on large folio error

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...

CVE-2026-64072: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request...

CVE-2026-64017: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep after peeking a cached request, but before it pops it, the plug flushes and calls blkmqfreeplugrqs, freeing the cachedrqs. This...

PT-2026-61370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bio integrity copy user function where the bip vcnt variable is incorrectly overwritten. Because bio integrity add page already sets bip vcnt to 1 for the bounce...

PT-2026-61136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the f2fs read data large folio function can maintain a read bio across multiple readahead folios. If a subsequent folio encounters an error...