CVE-2026-98635

In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zonescond out-of-bounds write on zone report blkrevalidatediskzones sizes the zonescond array from the disk capacity and zone size, but the index used by blkrevalidatezonecond comes from the device-driven...

EUVD-2026-103549

In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zonescond out-of-bounds write on zone report blkrevalidatediskzones sizes the zonescond array from the disk capacity and zone size, but the index used by blkrevalidatezonecond comes from the device-driven...

CVE-2026-98635 scsi: block: Fix zones_cond out-of-bounds write on zone report

In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zonescond out-of-bounds write on zone report blkrevalidatediskzones sizes the zonescond array from the disk capacity and zone size, but the index used by blkrevalidatezonecond comes from the device-driven...

CVE-2026-98635

The Linux kernel contains an out-of-bounds write vulnerability in the scsi block layer during zone reporting. The blk_revalidate_disk_zones() function sizes the zones_cond array based on disk capacity and zone size, but blk_revalidate_zone_cond() uses an index from the device-driven report_zones(...