CVE-2026-89573

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the dm array where the array block check() function only compares a header against itself, allowing internally consistent blocks with mismatched value sizes to pass. In dm-cache, which maintains mappings at 8 bytes and hints at 4 bytes, pointing the mappings root at a hint block causes load mappings() to stride 8 bytes over 4-byte entries. This leads to an out-of-bounds access, potentially reaching offset 8160 of a 4096-byte block. This condition is triggered via crafted metadata when get ablock() or shadow ablock() are called and the value sizes disagree.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.