CVE-2026-89456

s390/dasd: Propagate partial completion length across ERP recovery

State
Published
Severity
7.0 High
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: Propagate partial completion length across ERP recovery

dasd_default_erp_postaction() copies the timing and device state from the finished ERP request back to the original request but drops proc_bytes. A request that was partially completed, an ESE read of a not-yet-allocated track returns fewer bytes than requested, and then recovered through the ERP chain loses its partial-completion length. __dasd_cleanup_cqr() then sees proc_bytes == 0 and completes the whole request instead of requeueing the remainder, silently returning zeroed data for the part that was never read.

Carry proc_bytes over to the original request like the other per-request state.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before 9e063165d3fe58db2a517717b830f17e82d03467Affected
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before 6b0954c8a259da1e4aa745989f82723947acfb46Affected
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before d0a2f97d8c97134aa7f6a191940b7bab4bb42f5fAffected
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before f735b9710f0c8fe72c1060103e865f4ae678190bAffected
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before d6b8778b1b82aa3a8dbf8612080f635b834bd16bAffected
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before ceafb262475ac6cb3a7d07b1102608be2b216b99Affected
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before 15ec03452c18e8d288e519837d21b308300d74b2Affected
  • 5e6bdd37c5526ef01326df5dabb93011ee89237e to before 6fb5ba2e7e43173a3761e46f091070a8185efa14Affected
  • fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04Affected
  • 5f7c9989f11305aaa43e0f4378f4f070022a9f2bAffected
  • 5.4.26 to before 5.5Affected
  • 5.5.10 to before 5.6Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 5.10.270 through 5.10.*Not affected
  • 5.15.221 through 5.15.*Not affected
  • 6.1.188 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.