In the Linux kernel, the following vulnerability has been resolved:
block: add pgmap check to biovec_phys_mergeable
biovec_phys_mergeable() is used by the request merge, DMA mapping, and integrity merge paths to decide if two physically contiguous bvec segments can be coalesced into one. It currently has no check for whether the segments belong to different dev_pagemaps.
When zone device memory is registered in multiple chunks, each chunk gets its own dev_pagemap. A single bio can legitimately contain bvecs from different pgmaps -- iov_iter_extract_bvecs() breaks at pgmap boundaries but the outer loop in bio_iov_iter_get_pages() continues filling the same bio. If such bvecs are physically contiguous, biovec_phys_mergeable() will coalesce them, making it impossible to recover the correct pgmap for the merged segment via page_pgmap().
Add a zone_device_pages_have_same_pgmap() check to prevent merging bvec segments that span different pgmaps.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-develUpgrade kernel6.18Upgrade kernel6.18-tools-develUpgrade perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade python3-perf6.18-debuginfoUpgrade bpftool6.18Upgrade python3-perf6.18Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-toolsUpgrade kernel6.18-modules-extraUpgrade kernel-livepatch-6.18.30-61.116Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-headersUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfo | Jun 23, 2026 | May 28, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 28, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-oem-6.17Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-aws-7.0Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.17.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-6.17.0-1026-nvidiaUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.17.0-1019-awsUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.17.0-1018-oracle-64kUpgrade linux-image-6.17.0-1021-raspiUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-azure-fde-6.8Upgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtual-6.17Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-aws-6.17Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-7.0Upgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.17.0-40-genericUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-gke-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-6.17Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-kvmUpgrade linux-image-realtime-6.17Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-7.0Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-realtime-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.17.0-1028-oemUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-6.17.0-40-generic-64kUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-6.17Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-6.17Upgrade linux-image-ibm-7.0Upgrade linux-image-genericUpgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.17.0-1017-realtimeUpgrade linux-image-xilinxUpgrade linux-image-oracle-7.0Upgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-gcp-7.0Upgrade linux-image-raspi-6.17Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-6.17.0-1020-gcp-64kUpgrade linux-image-6.17.0-1019-aws-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-24.04dUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-6.17.0-1018-oracleUpgrade linux-image-virtual-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-6.17.0-1020-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-fde-6.17Upgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1007-oracle-64k | Jul 1, 2026 | May 28, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub