CVE-2026-64232

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the block layer where blk insert cloned request() fails to recompute nr integrity segments against the bottom queue. In stacked driver configurations, such as dm-multipath fanning out to nvme-rdma, the underlying queue may have more restrictive virt boundary mask, seg boundary mask, or max segment size settings than the top queue. This discrepancy can cause blk rq count integrity sg() to produce a count different from the cached rq->nr integrity segments inherited via blk rq prep clone(). If the cached count is lower than the actual count of the bottom queue, the blk rq map integrity sg() function triggers a BUG ON() during dispatch.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.