PT-2026-61369 · Linux · Linux

CVE-2026-64052 · Publicado 2026-07-19 · Atualizado 2026-07-19

NVD

In the Linux kernel, the following vulnerability has been resolved:

block: bio-integrity: Fix null-ptr-deref in bio integrity map user()

pin user pages fast() can partially succeed and return the number of pages that were actually pinned. However, the bio integrity map user() does not handle this partial pinning. This leads to a general protection fault since bvec from pages() dereferences an unpinned page address, which is 0.

To fix this, add a check to verify that all requested memory is pinned. If partial pinning occurs, unpin the memory and return -EFAULT.

Kernel Oops:

Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 0 UID: 0 PID: 1061 Comm: nvme-passthroug Not tainted 7.0.0-11783-g90957f9314e8-dirty #16 PREEMPT(lazy) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014 RIP: 0010:bio integrity map user.cold+0x1b0/0x9d6

Identificadores relacionados

CVE-2026-64052

Produtos afetados

Linux

Referências · 5

• https://git.kernel.org/stable/c/8fa244738641d95ea4d70e6f9a62778bba42a5b7 · Nota
• https://git.kernel.org/stable/c/76410790f1491c8e06a451045ae223a61c652455 · Nota
• https://git.kernel.org/stable/c/8582792cf23b3d94674d4d838f7cde9a28d0fcaf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64052 · Nota de Segurança
• https://git.kernel.org/stable/c/77c059f41e9395793917d067476f549a911d77d3 · Nota