CVE-2026-74470

The CVE-2026-74470 issue affects the Linux kernel’s scsi_debug REPORT ZONES handling. The function resp_report_zones derives the reply buffer size from alloc_len; a v3 fix rounds alloc_len up with ALIGN() and computes rep_max_zones and arr_len accordingly. For alloc_len in 0xFFFFFFC1..0xFFFFFFFF,...

CVE-2026-74470

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix REPORT ZONES alloclen underflow OOB write respreportzones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloclen up with ALIGN before deriving the descriptor count: repmaxzones =...