In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLK_STS_NOTSUPP… (CVE-2026-89577)
A vulnerability in the Linux kernel's device mapper I/O (dm-io) component related to error reporting on dm-raid1 has been resolved. The issue involved improper handling of certain error codes (BLK_STS_NOTSUPP and BLK_STS_INVAL) that should not cause failure of a dm-raid1 leg. The fix introduces separate reporting of non-retryable errors to prevent misbehavior when unaligned bio vectors are used on dm-raid1.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-89577 concerns the dm-io subsystem's error reporting mechanism. Previously, error codes BLK_STS_NOTSUPP and BLK_STS_INVAL caused dm-raid1 legs to fail incorrectly. The patch changes the dm-io interface to report two separate error bitmaps: error_bits for general errors and unsup_bits specifically for BLK_STS_NOTSUPP and BLK_STS_INVAL. This prevents dm-raid1 from failing a leg due to these unsupported or invalid errors. The fix addresses misbehavior triggered by unaligned bio vectors on dm-raid1.
Potential Impact
The vulnerability could cause dm-raid1 to incorrectly fail a leg due to certain non-retryable errors, potentially affecting RAID1 reliability or performance under specific conditions involving unaligned bio vectors. No known exploits are reported in the wild.
Mitigation Recommendations
A patch has been applied to the Linux kernel to separate error reporting for non-retryable errors in dm-io and to prevent dm-raid1 leg failures caused by these errors. Users should update to the fixed kernel version containing this patch. No additional mitigation is indicated.
In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLK_STS_NOTSUPP… (CVE-2026-89577)
Description
A vulnerability in the Linux kernel's device mapper I/O (dm-io) component related to error reporting on dm-raid1 has been resolved. The issue involved improper handling of certain error codes (BLK_STS_NOTSUPP and BLK_STS_INVAL) that should not cause failure of a dm-raid1 leg. The fix introduces separate reporting of non-retryable errors to prevent misbehavior when unaligned bio vectors are used on dm-raid1.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-89577 concerns the dm-io subsystem's error reporting mechanism. Previously, error codes BLK_STS_NOTSUPP and BLK_STS_INVAL caused dm-raid1 legs to fail incorrectly. The patch changes the dm-io interface to report two separate error bitmaps: error_bits for general errors and unsup_bits specifically for BLK_STS_NOTSUPP and BLK_STS_INVAL. This prevents dm-raid1 from failing a leg due to these unsupported or invalid errors. The fix addresses misbehavior triggered by unaligned bio vectors on dm-raid1.
Potential Impact
The vulnerability could cause dm-raid1 to incorrectly fail a leg due to certain non-retryable errors, potentially affecting RAID1 reliability or performance under specific conditions involving unaligned bio vectors. No known exploits are reported in the wild.
Mitigation Recommendations
A patch has been applied to the Linux kernel to separate error reporting for non-retryable errors in dm-io and to prevent dm-raid1 leg failures caused by these errors. Users should update to the fixed kernel version containing this patch. No additional mitigation is indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fm7m-v5fw-6w27
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89577"]
Threat ID: 6aa4a00f55bf5e2cf5a8669f
Added to database: 09/12/2026, 00:42:55 UTC
Last enriched: 09/12/2026, 01:05:44 UTC
Last updated: 09/12/2026, 01:05:44 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.