GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

GHSA-H4QC-9G56-8MX9

Vulnerability from github – Published: 2026-09-11 21:31 – Updated: 2026-09-14 15:32
VLAI
Details

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: Do not complete a failed ESE read as successful

dasd_int_handler() completes an NRF read of an unallocated ESE track by calling ese_read() and unconditionally marking the request DASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has zeroed the destination buffer: a failed sense-data parse or a current track outside the requested range both return early, leaving the destination pages untouched. The request is still completed successfully, so the block layer is handed stale / uninitialized memory instead of zeros.

Check the ese_read() return value and fail the request through the normal error path instead of forcing DASD_CQR_SUCCESS.

Show details on source website
To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2026-89458"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-11T20:19:26Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Do not complete a failed ESE read as successful\n\ndasd_int_handler() completes an NRF read of an unallocated ESE track by\ncalling ese_read() and unconditionally marking the request\nDASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has\nzeroed the destination buffer: a failed sense-data parse or a current\ntrack outside the requested range both return early, leaving the\ndestination pages untouched. The request is still completed successfully,\nso the block layer is handed stale / uninitialized memory instead of\nzeros.\n\nCheck the ese_read() return value and fail the request through the normal\nerror path instead of forcing DASD_CQR_SUCCESS.",
  "id": "GHSA-h4qc-9g56-8mx9",
  "modified": "2026-09-14T15:32:24Z",
  "published": "2026-09-11T21:31:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89458"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/52b331c99baac653ca794bd8487c8ec4de8db203"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/55f4df40178cdfede0d7ae848fbab00efa9b95c1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/77168af195d04b34c6de62b874624e74d64cef8d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8cb96cffceead3cbd0541154d7ecc5e6474edda1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/921ff697bb6f7067059793becf8b2d00de71ce41"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c9adf8399732306dfc97b3adb4778038743e3f5e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/cddb447c62466f3076938ce120028d7b591f9f37"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.