CVE-2026-93074

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fsdev dax direct access() function where the kernel virtual address is calculated by adding a device-linear byte offset to virt addr. In multi-range devices with physical gaps between ranges, this linear arithmetic can cross the gap, resulting in an incorrect kernel virtual address. The issue is resolved by using va(phys), where phys is obtained from dax pgoff to phys(), ensuring correct translation for any range layout via the direct map.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.