CVE-2026-89575

Received Received - Intake

dm raid1 buffer overflow in Linux kernel

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build_constructor_string() Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-89575

EUVD

EUVD-2026-76487

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a buffer overflow vulnerability in the Linux kernel's device mapper RAID1 implementation. It occurs when building a constructor string where space for a null terminator is not properly reserved after converting a long long value to a string. This could lead to memory corruption if sprintf is used without sufficient buffer space.

Detection Guidance

This vulnerability is specific to the Linux kernel's dm raid1 component and requires kernel-level inspection. Check your kernel version with 'uname -r' and verify if it is affected. Look for dm raid1 module usage in 'lsmod | grep raid1'. No direct network detection commands are applicable as this is a local kernel issue.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code, escalate privileges, or cause a denial of service on systems running vulnerable Linux kernel versions with dm raid1 enabled. It primarily affects systems using device mapper RAID1 functionality.

Mitigation Strategies

Update your Linux kernel to the latest patched version immediately. If updating is not possible, disable dm raid1 functionality temporarily by unloading the module with 'modprobe -r dm_raid' until a patch is applied.

Hi! I’m here to help you understand CVE-2026-89575. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70