CVE-2026-64232

A flaw was found in the Linux kernel's block subsystem. The blk_insert_cloned_request() function, used in stacked driver configurations, fails to correctly recompute the number of integrity segments. This oversight can lead to a system crash, resulting in a Denial of Service (DoS) for a local user.

This vulnerability has been rated as having a Low impact because triggering the condition requires local privileges and a non-standard storage topology utilizing stacked block devices with data integrity extensions. In standard Red Hat Enterprise Linux deployments, block-level data integrity features are not enabled by default, and requests must target specific underlying queues with mismatched segment boundaries. While triggering the bug results in a kernel assertion failure and local denial of service, the issue cannot be exploited remotely and does not compromise data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.