s390/dasd: Do not complete a failed ESE read as successful
Summary
| CVE | CVE-2026-89458 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-11 20:19:26 UTC |
| Updated | 2026-09-14 13:19:02 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasd_int_handler() completes an NRF read of an unallocated ESE track by calling ese_read() and unconditionally marking the request DASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has zeroed the destination buffer: a failed sense-data parse or a current track outside the requested range both return early, leaving the destination pages untouched. The request is still completed successfully, so the block layer is handed stale / uninitialized memory instead of zeros. Check the ese_read() return value and fail the request through the normal error path instead of forcing DASD_CQR_SUCCESS. |
Risk And Classification
EPSS: 0.001680000 probability, percentile 0.063460000 (date 2026-09-14)
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e 8cb96cffceead3cbd0541154d7ecc5e6474edda1 git | Not specified |
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e 77168af195d04b34c6de62b874624e74d64cef8d git | Not specified |
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e 921ff697bb6f7067059793becf8b2d00de71ce41 git | Not specified |
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e 55f4df40178cdfede0d7ae848fbab00efa9b95c1 git | Not specified |
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e c9adf8399732306dfc97b3adb4778038743e3f5e git | Not specified |
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e 52b331c99baac653ca794bd8487c8ec4de8db203 git | Not specified |
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f git | Not specified |
| CNA | Linux | Linux | affected 5e6bdd37c5526ef01326df5dabb93011ee89237e cddb447c62466f3076938ce120028d7b591f9f37 git | Not specified |
| CNA | Linux | Linux | affected fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04 git | Not specified |
| CNA | Linux | Linux | affected 5f7c9989f11305aaa43e0f4378f4f070022a9f2b git | Not specified |
| CNA | Linux | Linux | affected 5.4.26 5.5 semver | Not specified |
| CNA | Linux | Linux | affected 5.5.10 5.6 semver | Not specified |
| CNA | Linux | Linux | affected 5.6 | Not specified |
| CNA | Linux | Linux | unaffected 5.6 semver | Not specified |
| CNA | Linux | Linux | unaffected 5.10.270 5.10.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.15.221 5.15.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.188 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.157 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.109 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.18.50 6.18.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.2.4 7.2.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.3-rc1 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/8cb96cffceead3cbd0541154d7ecc5e6474edda1 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/cddb447c62466f3076938ce120028d7b591f9f37 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/c9adf8399732306dfc97b3adb4778038743e3f5e | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/77168af195d04b34c6de62b874624e74d64cef8d | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/52b331c99baac653ca794bd8487c8ec4de8db203 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/921ff697bb6f7067059793becf8b2d00de71ce41 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/55f4df40178cdfede0d7ae848fbab00efa9b95c1 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.