Linux Kernel Vulnerability Affecting Integrity Segment Handling

CVE-2026-64232

What is CVE-2026-64232?

A vulnerability exists in the Linux kernel related to the handling of integrity segments during block request processing. The blk_insert_cloned_request() function failed to properly recompute the number of integrity segments against the underlying queue, which could lead to inconsistencies in segment accounting. This oversight could result in requests being dispatched with incorrect integrity segment counts, potentially causing system instability or unexpected behavior in stacked driver setups, including configurations that utilize dm-multipath with NVMe over RDMA. The recent changes rectify this by aligning integrity segment accounting with existing physical segment accounting practices, ensuring robust handling of integrity in block requests.

References