CVE-2026-89458
Description
A flaw was found in the Linux kernel's s390/dasd component. The dasd_int_handler() function incorrectly marks failed Extended Sense Data (ESE) read operations as successful when processing unallocated ESE tracks. This leads to the block layer receiving stale or uninitialized memory instead of properly zeroed memory. A local attacker could exploit this vulnerability to potentially gain access to sensitive information, resulting in information disclosure.
Statement
An s390 DASD ESE read of an unallocated track could be completed as successful even when ese_read failed before zeroing the destination buffer. In that case the block layer may receive stale or uninitialized memory instead of the expected zero filled data, which can expose sensitive data or return incorrect file or block contents. For the CVSS the PR:L is used because a local user or process with read access to the affected storage path may be enough to observe returned data, while administrative privileges are not necessarily required for every mounted filesystem case. The issue is not network reachable and depends on s390 DASD ESE thin provisioned devices plus a failed ESE read path, so AC:H is used. Impact is mainly confidentiality disclosure with limited integrity impact from incorrect read data, and possible limited availability impact in the paranoid score if stale data disrupts higher layer storage handling.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 2.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | High | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | Low | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | None | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
