Answer in brief
CVE-2026-98634 records a Unknown severity vulnerability in scsi: sd_zbc: Reject disks with too many zones. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=89d9475610771b5e5fe1879075f0fc9ba6e3755f <d8791ae55d85dfaeafa20ea48365482a0cc5a107 || >=89d9475610771b5e5fe1879075f0fc9ba6e3755f <0af16d8be3ec7ff28bb56a0da79c9aed66ac2c3b || >=89d9475610771b5e5fe1879075f0fc9ba6e3755f <3ddf8383b54456f19fd73d3cebed81bd250c7388 || >=89d9475610771b5e5fe1879075f0fc9ba6e3755f <b6ec0f79745967c751c85df373062c8d15e45fc4 | d8791ae55d85dfaeafa20ea48365482a0cc5a107, 0af16d8be3ec7ff28bb56a0da79c9aed66ac2c3b, 3ddf8383b54456f19fd73d3cebed81bd250c7388, b6ec0f79745967c751c85df373062c8d15e45fc4 |
| Linux/Linuxgeneric | 4.10 | Not reported |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: sd_zbc: Reject disks with too many zones sd_zbc_read_zones() computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nr_zones field of struct zoned_disk_info, silently truncating counts that exceed 32 bits. The truncated count is later used to size per-zone resources, while the device may still report more zones than fit. Moreover, sd_zbc_report_zones() counts the reported zones with a signed int zone_idx, which overflows past INT_MAX. Reject devices reporting more than INT_MAX zones at scan time; such a device is not realistic for any medium that exists today, and accepting it produces inconsistent zone bookkeeping.
Quoted source text, attributed separately from HOL analysis.