UBUNTU-CVE-2026-98634: High severity ubuntu/linux-azure vulnerability
In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones() computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that exceed 32 bits. The truncated count is later used to size per-zone resources, while the device may still report more zones than fit. Moreover, sdzbcreportzones() counts the reported zones with a signed int zoneidx, which overflows past INTMAX. Reject devices reporting more than INTMAX zones at scan time; such a device is not realistic for any medium that exists today, and accepting it produces inconsistent zone bookkeeping.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1 - Compensating control
At scan time, reject devices reporting more than INT_MAX zones to prevent inconsistent zone bookkeeping and oversized per-zone resource allocation.
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the listed Ubuntu Linux kernel packages are relevant only if they scan or use a SCSI zoned disk that reports more than INT_MAX zones. The advisory notes that such a device is not realistic for any medium that exists today.
What must occur for the flaw to be triggered?
A SCSI zoned disk must report a zone count exceeding INT_MAX during device scanning. The vulnerable code can truncate the zone count and later overflow its signed reported-zone counter, causing inconsistent zone bookkeeping.
How is the issue addressed by the resolution?
The resolution rejects disks reporting more than INT_MAX zones at scan time. This prevents the oversized zone count from being accepted and used to allocate or track per-zone resources.