2 matches found
EUVD-2026-45626
In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bipvcnt in biointegritycopyuser biointegrityaddpage already sets bipvcnt to 1 for the bounce segment. Overwriting it with nrvecs breaks bipvcnt = bipmaxvcnt on WRITE bipmaxvcnt is 1, so the gap-merge checks...
PT-2026-61370
In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bip vcnt in bio integrity copy user bio integrity add page already sets bip vcnt to 1 for the bounce segment. Overwriting it with nr vecs breaks bip vcnt = bip max vcnt on WRITE bip max vcnt is 1, so the...