CVE-2026-89577

A flaw was found in the Linux kernel's device mapper I/O (dm-io) and RAID1 (dm-raid1) components. Incorrect error handling for non-retryable errors (such as BLK_STS_NOTSUPP and BLK_STS_INVAL) could lead to misbehavior when a user utilizes unaligned bio vectors on dm-raid1. This misbehavior could potentially cause instability or incorrect operation of the RAID array.

This vulnerability is rated as Low severity because exploitation requires local access and is constrained to systems actively utilizing device-mapper RAID1 storage targets. In typical Red Hat environments, triggering this flaw requires specific unaligned direct I/O patterns that lead to mirror leg failure rather than broader system compromise or privilege escalation. The vulnerable dm-io error reporting logic was introduced in newer upstream kernels, leaving established platforms such as Red Hat Enterprise Linux 8 and 9 unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.