All vulnerabilities
CVE-2026-98634

Linux: scsi: sd_zbc: Reject disks with too many zones

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0af16d8be3ec7ff28bb56a0da79c9aed66ac2c3bAlso 3ddf8383b54456f19fd73d3cebed81bd250c7388CVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 0af16d8be3ec7ff28bb56a0da79c9aed66ac2c3bLinuxCVE List
  • 3ddf8383b54456f19fd73d3cebed81bd250c7388LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd_zbc: Reject disks with too many zones

sd_zbc_read_zones() computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nr_zones field of struct zoned_disk_info, silently truncating counts that exceed 32 bits. The truncated count is later used to size per-zone resources, while the device may still report more zones than fit.

Moreover, sd_zbc_report_zones() counts the reported zones with a signed int zone_idx, which overflows past INT_MAX. Reject devices reporting more than INT_MAX zones at scan time; such a device is not realistic for any medium that exists today, and accepting it produces inconsistent zone bookkeeping.

Text from CVE List

Affected versions 10

  • Linuxaffected: 89d9475610771b5e5fe1879075f0fc9ba6e3755f before d8791ae55d85dfaeafa20ea48365482a0cc5a107CVE List
  • Linuxaffected: 89d9475610771b5e5fe1879075f0fc9ba6e3755f before 0af16d8be3ec7ff28bb56a0da79c9aed66ac2c3bCVE List
  • Linuxaffected: 89d9475610771b5e5fe1879075f0fc9ba6e3755f before 3ddf8383b54456f19fd73d3cebed81bd250c7388CVE List
  • Linuxaffected: 89d9475610771b5e5fe1879075f0fc9ba6e3755f before b6ec0f79745967c751c85df373062c8d15e45fc4CVE List
  • Linuxaffected: 4.10CVE List
  • Linuxunaffected: all versions before 4.10CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4