{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.10-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  block: reject polled dio with user integrity metadata  IOCB_HAS_METADATA leaves iocb-\u003eprivate as a uio_meta, while iocb_bio_iopoll() expects a bio. Since 2729a60bbfb9, metadata I/O always uses __blkdev_direct_IO(), which never publishes the bio for polling, so IOPOLL calls bio_poll() on the uio_meta.  Reproducer: io_uring IOPOLL plus a PI attribute on an integrity device (scsi_debug dif=1 dix=1). KASAN reports:    Oops: general protection fault, probably for non-canonical   address 0xdffffc0000000004   KASAN: null-ptr-deref in range   [0x0000000000000020-0x0000000000000027]   RIP: 0010:bio_poll+0x9d/0x4b0   Call Trace:    iocb_bio_iopoll+0x5b/0x80    io_uring_classic_poll+0xf3/0x140    io_do_iopoll+0x4e3/0xc00    io_iopoll_check+0x275/0x560    __do_sys_io_uring_enter+0x2e5/0x720  Return -EOPNOTSUPP when HIPRI is combined with user metadata.",
  "id": "DEBIAN-CVE-2026-98821",
  "modified": "2026-10-19T04:47:43.885538515Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-98821"
    }
  ],
  "upstream": [
    "CVE-2026-98821"
  ]
}