CVE-2026-89458

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89458", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.707Z", "datePublished": "2026-09-11T19:43:21.346Z", "dateUpdated": "2026-10-19T08:47:07.708Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T08:47:07.708Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Do not complete a failed ESE read as successful\n\ndasd_int_handler() completes an NRF read of an unallocated ESE track by\ncalling ese_read() and unconditionally marking the request\nDASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has\nzeroed the destination buffer: a failed sense-data parse or a current\ntrack outside the requested range both return early, leaving the\ndestination pages untouched. The request is still completed successfully,\nso the block layer is handed stale / uninitialized memory instead of\nzeros.\n\nCheck the ese_read() return value and fail the request through the normal\nerror path instead of forcing DASD_CQR_SUCCESS."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/s390/block/dasd.c"], "versions": [{"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "8cb96cffceead3cbd0541154d7ecc5e6474edda1", "status": "affected", "versionType": "git"}, {"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "77168af195d04b34c6de62b874624e74d64cef8d", "status": "affected", "versionType": "git"}, {"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "921ff697bb6f7067059793becf8b2d00de71ce41", "status": "affected", "versionType": "git"}, {"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "55f4df40178cdfede0d7ae848fbab00efa9b95c1", "status": "affected", "versionType": "git"}, {"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "c9adf8399732306dfc97b3adb4778038743e3f5e", "status": "affected", "versionType": "git"}, {"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "52b331c99baac653ca794bd8487c8ec4de8db203", "status": "affected", "versionType": "git"}, {"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f", "status": "affected", "versionType": "git"}, {"version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "lessThan": "cddb447c62466f3076938ce120028d7b591f9f37", "status": "affected", "versionType": "git"}, {"version": "fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04", "status": "affected", "versionType": "git"}, {"version": "5f7c9989f11305aaa43e0f4378f4f070022a9f2b", "status": "affected", "versionType": "git"}, {"version": "5.4.26", "lessThan": "5.5", "status": "affected", "versionType": "semver"}, {"version": "5.5.10", "lessThan": "5.6", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/s390/block/dasd.c"], "versions": [{"version": "5.6", "status": "affected"}, {"version": "0", "lessThan": "5.6", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.270", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.221", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.188", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.157", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.109", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.50", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "5.10.270"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "5.15.221"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.1.188"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.6.157"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.12.109"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.18.50"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.26"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.5.10"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/8cb96cffceead3cbd0541154d7ecc5e6474edda1"}, {"url": "https://git.kernel.org/stable/c/77168af195d04b34c6de62b874624e74d64cef8d"}, {"url": "https://git.kernel.org/stable/c/921ff697bb6f7067059793becf8b2d00de71ce41"}, {"url": "https://git.kernel.org/stable/c/55f4df40178cdfede0d7ae848fbab00efa9b95c1"}, {"url": "https://git.kernel.org/stable/c/c9adf8399732306dfc97b3adb4778038743e3f5e"}, {"url": "https://git.kernel.org/stable/c/52b331c99baac653ca794bd8487c8ec4de8db203"}, {"url": "https://git.kernel.org/stable/c/b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f"}, {"url": "https://git.kernel.org/stable/c/cddb447c62466f3076938ce120028d7b591f9f37"}], "title": "s390/dasd: Do not complete a failed ESE read as successful", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/s390/block/dasd.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "8cb96cffceead3cbd0541154d7ecc5e6474edda1", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"lessThan": "77168af195d04b34c6de62b874624e74d64cef8d", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"lessThan": "921ff697bb6f7067059793becf8b2d00de71ce41", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"lessThan": "55f4df40178cdfede0d7ae848fbab00efa9b95c1", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"lessThan": "c9adf8399732306dfc97b3adb4778038743e3f5e", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"lessThan": "52b331c99baac653ca794bd8487c8ec4de8db203", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"lessThan": "b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"lessThan": "cddb447c62466f3076938ce120028d7b591f9f37", "status": "affected", "version": "5e6bdd37c5526ef01326df5dabb93011ee89237e", "versionType": "git"}, {"status": "affected", "version": "fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04", "versionType": "git"}, {"status": "affected", "version": "5f7c9989f11305aaa43e0f4378f4f070022a9f2b", "versionType": "git"}, {"lessThan": "5.5", "status": "affected", "version": "5.4.26", "versionType": "semver"}, {"lessThan": "5.6", "status": "affected", "version": "5.5.10", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/s390/block/dasd.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.6"}, {"lessThan": "5.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.270", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.221", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.188", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.157", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.109", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.50", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Do not complete a failed ESE read as successful\n\ndasd_int_handler() completes an NRF read of an unallocated ESE track by\ncalling ese_read() and unconditionally marking the request\nDASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has\nzeroed the destination buffer: a failed sense-data parse or a current\ntrack outside the requested range both return early, leaving the\ndestination pages untouched. The request is still completed successfully,\nso the block layer is handed stale / uninitialized memory instead of\nzeros.\n\nCheck the ese_read() return value and fail the request through the normal\nerror path instead of forcing DASD_CQR_SUCCESS."}], "id": "CVE-2026-89458", "lastModified": "2026-10-19T09:17:38.187", "metrics": {}, "published": "2026-09-11T20:19:26.657", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/52b331c99baac653ca794bd8487c8ec4de8db203"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/55f4df40178cdfede0d7ae848fbab00efa9b95c1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/77168af195d04b34c6de62b874624e74d64cef8d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8cb96cffceead3cbd0541154d7ecc5e6474edda1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/921ff697bb6f7067059793becf8b2d00de71ce41"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c9adf8399732306dfc97b3adb4778038743e3f5e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cddb447c62466f3076938ce120028d7b591f9f37"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel s390/dasd: Information disclosure from improper ESE read handling", "id": "2532050", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532050"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "status": "draft"}, "cwe": "CWE-824", "details": ["A flaw was found in the Linux kernel's s390/dasd component. The `dasd_int_handler()` function incorrectly marks failed Extended Sense Data (ESE) read operations as successful when processing unallocated ESE tracks. This leads to the block layer receiving stale or uninitialized memory instead of properly zeroed memory. A local attacker could exploit this vulnerability to potentially gain access to sensitive information, resulting in information disclosure."], "name": "CVE-2026-89458", "package_state": [{"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-11T19:43:21Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89458\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89458\nhttps://git.kernel.org/stable/c/52b331c99baac653ca794bd8487c8ec4de8db203\nhttps://git.kernel.org/stable/c/b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f\nhttps://git.kernel.org/stable/c/c9adf8399732306dfc97b3adb4778038743e3f5e\nhttps://git.kernel.org/stable/c/cddb447c62466f3076938ce120028d7b591f9f37"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5e6bdd37c5526ef01326df5dabb93011ee89237e,c9adf8399732306dfc97b3adb4778038743e3f5e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5e6bdd37c5526ef01326df5dabb93011ee89237e,52b331c99baac653ca794bd8487c8ec4de8db203)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5e6bdd37c5526ef01326df5dabb93011ee89237e,b0d94dd6e82df396e2254c8b0f25eff7d19c2e7f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5e6bdd37c5526ef01326df5dabb93011ee89237e,cddb447c62466f3076938ce120028d7b591f9f37)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "5f7c9989f11305aaa43e0f4378f4f070022a9f2b"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.4.26,5.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.5.10,5.6)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.109,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.50,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2.4,7.2.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-12T03:00:10.895486+00:00", "updated": "2026-09-21T01:15:03.762979+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}