Unrated severityNVD Advisory· Published Sep 11, 2026· Updated Oct 19, 2026
CVE-2026-89770
CVE-2026-89770
Description
In the Linux kernel, the following vulnerability has been resolved:
iomap: don't free integrity payload that doesn't exist
fs_bio_integrity_alloc might not allocate a bio integrity payload if PI verification is disabled on the block device. Check for that case before calling fs_bio_integrity_free in iomap_bio_read_folio_range_sync to avoid a NULL pointer dereferences.
Make the branch cover the PI verification as well - while fs_bio_integrity_verify works without an integrity payload, it requires one to actually do useful work.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords2 versions
>= 7.1.0, < 7.2.4+ 1 more
- (no CPE)range: >= 7.1.0, < 7.2.4
- (no CPE)range: < 7.2.7-1.1
Patches
Vulnerability mechanics
References
2News mentions
1- Linux Kernel: 25 Vulnerabilities Patched in Single-Day Disclosure EventVypr Intelligence · Sep 11, 2026