Riskcovery

CVE-2026-89770

iomap: don't free integrity payload that doesn't exist

State
Published
Severity
Not scored
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iomap: don't free integrity payload that doesn't exist

fs_bio_integrity_alloc might not allocate a bio integrity payload if PI verification is disabled on the block device. Check for that case before calling fs_bio_integrity_free in iomap_bio_read_folio_range_sync to avoid a NULL pointer dereferences.

Make the branch cover the PI verification as well - while fs_bio_integrity_verify works without an integrity payload, it requires one to actually do useful work.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0b10a370529cbd7b918c1eef43d409e43d9e0b78 to before 65651f1001aa3638909bc58c7b2b46160692757bAffected
  • 0b10a370529cbd7b918c1eef43d409e43d9e0b78 to before 8a8685b32c0718cc7b2cb4d6202e5a5b8e0a8e2dAffected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.