Riskcovery

CVE-2026-98634

scsi: sd_zbc: Reject disks with too many zones

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd_zbc: Reject disks with too many zones

sd_zbc_read_zones() computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nr_zones field of struct zoned_disk_info, silently truncating counts that exceed 32 bits. The truncated count is later used to size per-zone resources, while the device may still report more zones than fit.

Moreover, sd_zbc_report_zones() counts the reported zones with a signed int zone_idx, which overflows past INT_MAX. Reject devices reporting more than INT_MAX zones at scan time; such a device is not realistic for any medium that exists today, and accepting it produces inconsistent zone bookkeeping.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 89d9475610771b5e5fe1879075f0fc9ba6e3755f to before d8791ae55d85dfaeafa20ea48365482a0cc5a107Affected
  • 89d9475610771b5e5fe1879075f0fc9ba6e3755f to before 0af16d8be3ec7ff28bb56a0da79c9aed66ac2c3bAffected
  • 89d9475610771b5e5fe1879075f0fc9ba6e3755f to before 3ddf8383b54456f19fd73d3cebed81bd250c7388Affected
  • 89d9475610771b5e5fe1879075f0fc9ba6e3755f to before b6ec0f79745967c751c85df373062c8d15e45fc4Affected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.55 through 6.18.*Not affected
  • 7.2.9 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.