In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()… (CVE-2026-64052)
A null pointer dereference vulnerability in the Linux kernel's bio_integrity_map_user() function was resolved. The issue arises because pin_user_pages_fast() can partially pin pages, but bio_integrity_map_user() does not handle partial pinning properly, leading to a general protection fault when dereferencing an unpinned page address. The fix involves verifying that all requested memory is pinned and unpinning memory with an error return if partial pinning occurs.
AI Analysis
Technical Summary
The Linux kernel contained a vulnerability in the block subsystem's bio_integrity_map_user() function where partial success from pin_user_pages_fast() was not handled correctly. This caused a null pointer dereference when bvec_from_pages() accessed an unpinned page address (address 0). The kernel would experience a general protection fault (kernel oops). The patch adds a check to ensure all pages are pinned; if not, it unpins any pinned pages and returns an error (-EFAULT).
Potential Impact
This vulnerability can cause a kernel crash (general protection fault) due to a null pointer dereference when handling bio integrity with partially pinned user pages. This may lead to denial of service by crashing the kernel. There is no indication of privilege escalation or code execution from the provided data.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by adding proper checks for partial pinning in bio_integrity_map_user(). Users should apply the official kernel updates that include this fix. Since this is not a cloud service, remediation requires updating the affected Linux kernel versions once patches are released. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()… (CVE-2026-64052)
Description
A null pointer dereference vulnerability in the Linux kernel's bio_integrity_map_user() function was resolved. The issue arises because pin_user_pages_fast() can partially pin pages, but bio_integrity_map_user() does not handle partial pinning properly, leading to a general protection fault when dereferencing an unpinned page address. The fix involves verifying that all requested memory is pinned and unpinning memory with an error return if partial pinning occurs.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel contained a vulnerability in the block subsystem's bio_integrity_map_user() function where partial success from pin_user_pages_fast() was not handled correctly. This caused a null pointer dereference when bvec_from_pages() accessed an unpinned page address (address 0). The kernel would experience a general protection fault (kernel oops). The patch adds a check to ensure all pages are pinned; if not, it unpins any pinned pages and returns an error (-EFAULT).
Potential Impact
This vulnerability can cause a kernel crash (general protection fault) due to a null pointer dereference when handling bio integrity with partially pinned user pages. This may lead to denial of service by crashing the kernel. There is no indication of privilege escalation or code execution from the provided data.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by adding proper checks for partial pinning in bio_integrity_map_user(). Users should apply the official kernel updates that include this fix. Since this is not a cloud service, remediation requires updating the affected Linux kernel versions once patches are released. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-f89w-gg6r-rvww
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64052"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a92a4a8d598912cbc1
Added to database: 07/19/2026, 19:38:17 UTC
Last enriched: 07/19/2026, 19:55:35 UTC
Last updated: 07/20/2026, 17:26:47 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.