CVE-2026-68478

In the Linux kernel, the following vulnerability has been resolved: memstick: msblock: reject a card that reports too many blocks msbftlinitialize computes the zone count from the card block count with no bound: msb-zonecount = msb-blockcount / MSBLOCKSINZONE; ... for i = 0; i zonecount; i++...

EUVD-2026-59100

In the Linux kernel, the following vulnerability has been resolved: memstick: msblock: reject a card that reports too many blocks msbftlinitialize computes the zone count from the card block count with no bound: msb-zonecount = msb-blockcount / MSBLOCKSINZONE; ... for i = 0; i zonecount; i++...

CVE-2026-68478

The CVE-2026-68478 vulnerability is in the Linux kernel’s memstick handling (ms_block/ftl). msb_ftl_initialize computes zone_count from block_count without proper bound checking, indexing free_block_count[] (size MS_MAX_ZONES = 16). A card reporting more than 16 zones (8192 blocks) can cause out-...