CVE-2026-89575

medium

Description

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build_constructor_string() Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf().

References

https://git.kernel.org/stable/c/f79b53ca3a68a46c6fc3b30b148d1dfb1b33ea8b

https://git.kernel.org/stable/c/73c37fe54cd056d07461b142ab0b8b81e1ef6ad8

https://git.kernel.org/stable/c/644140527ae494cedf3b5c0ecd16287deaea7a66

https://git.kernel.org/stable/c/0a3657ebd6b517b60cdc5123894047616974e25b

Details

Source: Mitre, NVD

Published: 2026-09-11

Updated: 2026-09-11

Risk Information

CVSS v2

Base Score: 6.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00216