CVE-2026-89971

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NVMe subsystem where the nvme update ns info block() function fails to correctly handle positive NVMe status codes returned by nvme query zone info(), only checking for negative error codes. If a device fails the Identify Namespace or Identify Controller commands, the system continues setup using zero-initialized zone information. This leads to a zoned queue being marked with a zero zone size. Consequently, when I/O is submitted, the disk zone no() function performs a shift operation by ilog2(0), resulting in a shift-out-of-bounds error. This condition can be triggered by any device, firmware, or NVMe-oF target that fails the specified command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.