CVE-2026-89575: dm raid1: reserve space for NUL-terminator in build_constructor_string()
Published Sep 11, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
dm raid1: reserve space for NUL-terminator in buildconstructorstring()
Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf().
Event History
Sep 11, 2026
CVE Published
via MITRE·07:44 PM
Data Sourced
via MITRE·07:44 PM
Description
Frequently Asked Questions
1
Is a workaround available if the kernel fix cannot be deployed immediately?
The supplied advisory does not provide a workaround or configuration-based mitigation. It identifies the issue as resolved through source changes that reserve space for the terminating NUL byte.
2
How can I locate the upstream remediation?
The advisory references stable-tree commits 0a3657ebd6b517b60cdc5123894047616974e25b, 644140527ae494cedf3b5c0ecd16287deaea7a66, and f79b53ca3a68a46c6fc3b30b148d1dfb1b33ea8b.