Answer in brief
CVE-2026-89456 records a Unknown severity vulnerability in s390/dasd: Propagate partial completion length across ERP recovery. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5e6bdd37c5526ef01326df5dabb93011ee89237e <d6b8778b1b82aa3a8dbf8612080f635b834bd16b || >=5e6bdd37c5526ef01326df5dabb93011ee89237e <ceafb262475ac6cb3a7d07b1102608be2b216b99 || >=5e6bdd37c5526ef01326df5dabb93011ee89237e <15ec03452c18e8d288e519837d21b308300d74b2 || >=5e6bdd37c5526ef01326df5dabb93011ee89237e <6fb5ba2e7e43173a3761e46f091070a8185efa14 || fbbacd0dcbc3ae9398c569dbea96ae4b5ad97e04 || 5f7c9989f11305aaa43e0f4378f4f070022a9f2b || >=5.4.26 <5.5 || >=5.5.10 <5.6 | d6b8778b1b82aa3a8dbf8612080f635b834bd16b, ceafb262475ac6cb3a7d07b1102608be2b216b99, 15ec03452c18e8d288e519837d21b308300d74b2, 6fb5ba2e7e43173a3761e46f091070a8185efa14, 5.5, 5.6 |
| Linux/Linuxgeneric | 5.6 | Not reported |
Published upstream
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 11, 2026
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasd_default_erp_postaction() copies the timing and device state from the finished ERP request back to the original request but drops proc_bytes. A request that was partially completed, an ESE read of a not-yet-allocated track returns fewer bytes than requested, and then recovered through the ERP chain loses its partial-completion length. __dasd_cleanup_cqr() then sees proc_bytes == 0 and completes the whole request instead of requeueing the remainder, silently returning zeroed data for the part that was never read. Carry proc_bytes over to the original request like the other per-request state.
Quoted source text, attributed separately from HOL analysis.