CVE-2026-89722

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pciwritelegacyio pciwritelegacyio loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; return...

CVE-2026-89722

CVE-2026-89722 is an out-of-bounds read in the Linux kernel's PCI/sysfs subsystem, specifically in pci_write_legacy_io(). The function unconditionally loaded a 4-byte (u32) value from the kernfs write buffer regardless of the actual write size (1, 2, or 4 bytes). Since kernfs_fop_write_iter() all...