CVE-2026-89575

dm raid1: reserve space for NUL-terminator in build_constructor_string()

State: Published
Severity: Not scored
Published: Sep 11, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm raid1: reserve space for NUL-terminator in build_constructor_string()

Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f5db4af466e2dca0fe822019812d586ca910b00c to before 35ba81c93fe7392c973af9881640180490e76f34Affected f5db4af466e2dca0fe822019812d586ca910b00c to before 1fcc9f9f35653c5ee1a8b144ec96ff3fc48532f7Affected f5db4af466e2dca0fe822019812d586ca910b00c to before 7b035983b895db3ae01d9855963d42541db42125Affected f5db4af466e2dca0fe822019812d586ca910b00c to before 01a0276706c7b6fb758a8e2ff9cf221a3dfcae97Affected f5db4af466e2dca0fe822019812d586ca910b00c to before 0a3657ebd6b517b60cdc5123894047616974e25bAffected f5db4af466e2dca0fe822019812d586ca910b00c to before 644140527ae494cedf3b5c0ecd16287deaea7a66Affected f5db4af466e2dca0fe822019812d586ca910b00c to before f79b53ca3a68a46c6fc3b30b148d1dfb1b33ea8bAffected f5db4af466e2dca0fe822019812d586ca910b00c to before 73c37fe54cd056d07461b142ab0b8b81e1ef6ad8Affected
LinuxLinux	2.6.31Affected before 2.6.31Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

f5db4af466e2dca0fe822019812d586ca910b00c to before 35ba81c93fe7392c973af9881640180490e76f34Affected
f5db4af466e2dca0fe822019812d586ca910b00c to before 1fcc9f9f35653c5ee1a8b144ec96ff3fc48532f7Affected
f5db4af466e2dca0fe822019812d586ca910b00c to before 7b035983b895db3ae01d9855963d42541db42125Affected
f5db4af466e2dca0fe822019812d586ca910b00c to before 01a0276706c7b6fb758a8e2ff9cf221a3dfcae97Affected
f5db4af466e2dca0fe822019812d586ca910b00c to before 0a3657ebd6b517b60cdc5123894047616974e25bAffected
f5db4af466e2dca0fe822019812d586ca910b00c to before 644140527ae494cedf3b5c0ecd16287deaea7a66Affected
f5db4af466e2dca0fe822019812d586ca910b00c to before f79b53ca3a68a46c6fc3b30b148d1dfb1b33ea8bAffected
f5db4af466e2dca0fe822019812d586ca910b00c to before 73c37fe54cd056d07461b142ab0b8b81e1ef6ad8Affected

LinuxLinux

2.6.31Affected
before 2.6.31Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.