CVE-2026-64052
Received Received - Intake

Null Pointer Dereference in Linux Kernel Block Layer

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() pin_user_pages_fast() can partially succeed and return the number of pages that were actually pinned. However, the bio_integrity_map_user() does not handle this partial pinning. This leads to a general protection fault since bvec_from_pages() dereferences an unpinned page address, which is 0. To fix this, add a check to verify that all requested memory is pinned. If partial pinning occurs, unpin the memory and return -EFAULT. Kernel Oops: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 0 UID: 0 PID: 1061 Comm: nvme-passthroug Not tainted 7.0.0-11783-g90957f9314e8-dirty #16 PREEMPT(lazy) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014 RIP: 0010:bio_integrity_map_user.cold+0x1b0/0x9d6

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64052
EUVD
EUVD-2026-45625

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel 7.0.0
linux linux_kernel From 7.0.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a null-pointer dereference vulnerability in the Linux kernel's block layer, specifically in the bio-integrity subsystem. The issue occurs when pin_user_pages_fast() partially pins memory pages but bio_integrity_map_user() fails to handle this case. This leads to a general protection fault when bvec_from_pages() tries to access an unpinned page address, which is treated as a null pointer (0). The fix involves checking if all requested memory is pinned and returning an error if partial pinning occurs.

The vulnerability triggers a kernel oops with a general protection fault, indicating a serious system crash risk. The error message shows a null-pointer dereference in the bio_integrity_map_user function, which is part of the block I/O integrity handling in the kernel.

Detection Guidance

This vulnerability may cause a kernel oops with a general protection fault. Check system logs for kernel panic messages or oops entries using: dmesg | grep -i "general protection fault" or journalctl -k | grep -i "oops"

Impact Analysis

This vulnerability can cause system crashes (kernel panics) due to the general protection fault. If exploited, it could lead to denial-of-service conditions where the affected system becomes unresponsive. Systems using block devices with integrity features (like some storage devices) are particularly at risk.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling a general protection fault that may lead to system instability or crashes. Such instability could disrupt data processing operations, potentially affecting the integrity and availability of personal or sensitive data, which are critical requirements under these regulations.

Mitigation Strategies

Apply the latest kernel patch that resolves this issue. Update your Linux kernel to a version containing the fix for bio_integrity_map_user().

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64052. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart