High severity7.8NVD Advisory· Published Jul 19, 2026· Updated Oct 16, 2026
CVE-2026-64053
CVE-2026-64053
Description
In the Linux kernel, the following vulnerability has been resolved:
block: don't overwrite bip_vcnt in bio_integrity_copy_user()
bio_integrity_add_page() already sets bip_vcnt to 1 for the bounce segment. Overwriting it with nr_vecs breaks bip_vcnt <= bip_max_vcnt on WRITE (bip_max_vcnt is 1), so the gap-merge checks in block/blk.h read past the bip_vec[] flex array. On READ the read is in bounds but lands on a saved user bvec instead of the bounce.
The line was added for split propagation, but bio_integrity_clone() doesn't copy bip_vcnt and BIP_CLONE_FLAGS excludes BIP_COPY_USER.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
46- osv-coords45 versionspkg:rpm/almalinux/kernel-corepkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-headerspkg:linux/kernelpkg:rpm/almalinux/kernel-64k-debugpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/perfpkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-core
< 5.14.0-687.51.1.el9_8+ 44 more
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: >= 6.11.0, < 6.12.92
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.