{"id":"AZL-100755","summary":"CVE-2026-89458 affecting package kernel 6.6.150.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Do not complete a failed ESE read as successful\n\ndasd_int_handler() completes an NRF read of an unallocated ESE track by\ncalling ese_read() and unconditionally marking the request\nDASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has\nzeroed the destination buffer: a failed sense-data parse or a current\ntrack outside the requested range both return early, leaving the\ndestination pages untouched. The request is still completed successfully,\nso the block layer is handed stale / uninitialized memory instead of\nzeros.\n\nCheck the ese_read() return value and fail the request through the normal\nerror path instead of forcing DASD_CQR_SUCCESS.","modified":"2026-09-14T05:26:59Z","published":"2026-09-11T20:19:26Z","upstream":["CVE-2026-89458"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89458"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.150.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-100755.json"}}],"schema_version":"1.9.0"}