4 matches found
CVE-2026-89557
In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblogshift in super1load In super1load, sb-bblogshift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocksset by the following sequence, 1930 rdev-badblocks.shif...
CVE-2026-89557 md: do overflow check for sb->bblog_shift in super_1_load()
In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblogshift in super1load In super1load, sb-bblogshift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocksset by the following sequence, 1930 rdev-badblocks.shif...
CVE-2026-89557
In the Linux kernel md (multiple device) subsystem, super_1_load() loads sb->bblog_shift (an __u8 value in range 0–255) from the on-disk superblock. This value is used as a left-shift on a 64-bit sector variable; an invalid shift value can cause integer overflow of sector, which then propagate...
EUVD-2026-76468
In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblogshift in super1load In super1load, sb-bblogshift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocksset by the following sequence, 1930 rdev-badblocks.shif...