CVE-2026-98727
Description
In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifier. If the zone info query reports a zero zone size, the path namespace is registered without zoned limits while the head still advertises the zoned capability with a zone size of zero, and reporting zones or writing to the head then shifts by ilog2(0). Drop the zoned feature from the head allocation and let the head limits refresh stack it in from the path namespace instead.
How to fix
- Linux Linux44dc998c38fb5e153c3ed5665f1112661841c3f5, 2d86abd28071481a1abd87204a47325975dc821c, 8b85838c1fdba5ba90152693ca158aa9660c628f, 4a5e49ba0abb8b4328d6318c9aef0c0121f95507 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 28982ad73d6a9605708631dc49a0c763cc398aa2 ≤ v < 44dc998c38fb5e153c3ed5665f1112661841c3f5, 28982ad73d6a9605708631dc49a0c763cc398aa2 ≤ v < 2d86abd28071481a1abd87204a47325975dc821c, 28982ad73d6a9605708631dc49a0c763cc398aa2 ≤ v < 8b85838c1fdba5ba90152693ca158aa9660c628f, 28982ad73d6a9605708631dc49a0c763cc398aa2 ≤ v < 4a5e49ba0abb8b4328d6318c9aef0c0121f95507, 6.11 | 44dc998c38fb5e153c3ed5665f1112661841c3f5, 2d86abd28071481a1abd87204a47325975dc821c, 8b85838c1fdba5ba90152693ca158aa9660c628f, 4a5e49ba0abb8b4328d6318c9aef0c0121f95507 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.