CVE-2026-89458

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description An issue exists in the s390/dasd component where the dasd int handler() function completes an NRF read of an unallocated ESE track by calling ese read() and unconditionally marking the request as DASD CQR SUCCESS. Because dasd eckd ese read() can return an error before zeroing the destination buffer—such as during a failed sense-data parse or when a current track is outside the requested range—the destination pages remain untouched. Consequently, the block layer receives stale or uninitialized memory instead of zeros.

Recommendations Update to version 7.2.6-1.1.