SB2026082859 - Integer overflow in Linux kernel s390 block driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026082859

SB2026082859 - Integer overflow in Linux kernel s390 block driver

Published: August 28, 2026

Security Bulletin ID SB2026082859
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Integer overflow (CVE-ID: CVE-2026-80710)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to an integer overflow leading to an undersized allocation in dasd_eckd_check_device_format() when processing caller-controlled track ranges. A local user can provide a sufficiently large start and stop unit range to trigger a buffer overflow and cause a denial of service.

The issue occurs because the computed buffer size is truncated before allocation, while subsequent operations use the full untruncated track count.


Remediation

Install update from vendor's website.

References