{"id":"AZL-109230","summary":"CVE-2026-98634 affecting package kernel 6.6.157.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd_zbc: Reject disks with too many zones\n\nsd_zbc_read_zones() computes the number of zones with 64-bit arithmetic and\nstores the result in the unsigned int nr_zones field of struct\nzoned_disk_info, silently truncating counts that exceed 32 bits. The\ntruncated count is later used to size per-zone resources, while the device\nmay still report more zones than fit.\n\nMoreover, sd_zbc_report_zones() counts the reported zones with a signed int\nzone_idx, which overflows past INT_MAX. Reject devices reporting more than\nINT_MAX zones at scan time; such a device is not realistic for any medium\nthat exists today, and accepting it produces inconsistent zone bookkeeping.","modified":"2026-10-19T14:17:05.783242986Z","published":"2026-10-18T16:17:16Z","upstream":["CVE-2026-98634"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98634"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.157.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109230.json"}}],"schema_version":"1.9.0"}