CVE-2026-89965

A flaw was found in the Linux kernel's nvdimm/btt component. This vulnerability arises from insufficient validation of the nfree field in the BTT info block, which is read from the storage medium. A specially crafted or foreign arena with an nfree value below the expected lane count can cause an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path The memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some cases where discoverarenas encounters an error. This leads to memor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: rejecting an arena whose nfree value is lower than the number of lanes. The nfree field in the BTT info block, which represents the number of reserved free blocks, is read from the medium without validation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Arenas allocated by discoverarenas or createarenas are not freed on some error paths during bttinit. This leads to memory leakage when BTT initialization fails. Free arenas are called using freearenas from the affecte...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handling preemption in BTT lane acquisition BTT lanes serialize access to per-lane metadata and workspace state during BTT I/O. The btt-check unit test reports data mismatches during BTT writes due to a race in lane...

SUSE CVE-2026-89965

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

AZL-101126 CVE-2026-89965 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

CVE-2026-89965

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

DEBIAN-CVE-2026-89965

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

CVE-2026-89965 nvdimm/btt: reject an arena whose nfree is below the lane count

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

CVE-2026-89965

CVE-2026-89965 affects the Linux kernel nvdimm/btt subsystem. The BTT info block's nfree field (number of reserve free blocks) is read from the medium without validation. btt_freelist_init() and btt_rtt_init() size per-lane freelist[] and rtt[] arrays by nfree, but the I/O path indexes them by la...

CVE-2026-89965 nvdimm/btt: reject an arena whose nfree is below the lane count

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

EUVD-2026-80565

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

CVE-2026-89965: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...

Linux Distros Unpatched Vulnerability : CVE-2026-89965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium...

SUSE CVE-2026-74365

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquisition BTT lanes serialize access to per-lane metadata and workspace state during BTT I/O. The btt-check unit test reports data mismatches during BTT writes due to a race in lane...

SUSE CVE-2026-72223

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

SUSE CVE-2026-72224

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

CVE-2026-72223

A flaw was found in the Linux kernel's nvdimm/btt module. This vulnerability occurs when the discoverarenas function encounters an error, failing to properly deallocate memory. Specifically, memory allocated by sub-functions like bttfreelistinit is not released, leading to a memory leak. This can...

Linux Distros Unpatched Vulnerability : CVE-2026-72224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks...