CVE-2026-89965

A flaw was found in the Linux kernel's nvdimm/btt component. This vulnerability arises from insufficient validation of the nfree field in the BTT info block, which is read from the storage medium. A specially crafted or foreign arena with an nfree value below the expected lane count can cause an out-of-bounds write when accessing per-lane data structures. This could lead to memory corruption.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and the presence of non-volatile memory (NVDIMM) devices configured with Block Translation Table (BTT). In standard enterprise environments, NVDIMMs are specialized hardware, and configuring or mounting storage volumes with malformed arena metadata typically requires elevated privileges. Consequently, the flaw presents a limited attack surface and cannot be triggered remotely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.