CVE-2026-80710

A flaw was found in the Linux kernel's s390/dasd component. An integer truncation vulnerability in the dasd_eckd_check_device_format() function can lead to an undersized buffer allocation. This allows a local attacker to write past the end of the allocated buffer, potentially causing memory corruption and leading to a denial of service or privilege escalation.

This vulnerability is rated as Moderate for Red Hat Enterprise Linux because exploitation requires local access on IBM Z (s390x) architecture systems configured with ECKD Direct Access Storage Devices, limiting the attack surface. Non-mainframe architectures and s390x deployments that do not utilize DASD storage are not exposed to this flaw. Furthermore, triggering the underlying format-verification ioctl typically demands administrative privileges or explicit write permissions on the block device node, which reduces the likelihood of unauthorized privilege elevation or arbitrary kernel memory manipulation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.