In the Linux kernel, the following vulnerability has been resolved:
block: add pgmap check to biovec_phys_mergeable
biovec_phys_mergeable() is used by the request merge, DMA mapping, and integrity merge paths to decide if two physically contiguous bvec segments can be coalesced into one. It currently has no check for whether the segments belong to different dev_pagemaps.
When zone device memory is registered in multiple chunks, each chunk gets its own dev_pagemap. A single bio can legitimately contain bvecs from different pgmaps -- iov_iter_extract_bvecs() breaks at pgmap boundaries but the outer loop in bio_iov_iter_get_pages() continues filling the same bio. If such bvecs are physically contiguous, biovec_phys_mergeable() will coalesce them, making it impossible to recover the correct pgmap for the merged segment via page_pgmap().
Add a zone_device_pages_have_same_pgmap() check to prevent merging bvec segments that span different pgmaps.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-tools-develUpgrade perf6.18Upgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18Upgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade python3-perf6.18Upgrade kernel6.18-toolsUpgrade kernel-livepatch-6.18.30-61.116Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-modules-extraUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64 | Jun 23, 2026 | May 28, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 28, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-6.17Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-fips-6.8Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-gkeopUpgrade linux-image-6.17.0-40-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-6.17.0-1017-realtimeUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.17.0-1020-gcp-64kUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1019-aws-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fde-6.17Upgrade linux-image-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-7.0Upgrade linux-image-6.8.0-134-fipsUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-6.17.0-1018-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-generic-6.17Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azure-6.17Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-raspi-6.17Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-gcp-7.0Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.17.0-1020-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-7.0Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-laptop-23.10Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-6.17.0-40-genericUpgrade linux-image-6.8.0-134-genericUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-6.17.0-1026-nvidia-64kUpgrade linux-image-6.17.0-1026-nvidiaUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-26.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.17Upgrade linux-image-awsUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1018-oracle-64kUpgrade linux-image-nvidia-6.17Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1008-oemUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-6.17.0-1019-awsUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-azureUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-oem-7.0Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-6.17.0-1028-oemUpgrade linux-image-6.17.0-1021-raspiUpgrade linux-image-virtual-6.17Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-7.0Upgrade linux-image-aws-64k-6.17Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-6.17Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-realtime-6.17Upgrade linux-image-nvidia-6.8Upgrade linux-image-kvm | Jul 1, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub