---
title: "CVE-2026-89559: Linux Kernel libnvdimm - Integer Overflow"
description: "Linux kernel libnvdimm contains an integer overflow caused by 32-bit multiplication wraparound in __nd_label_validate(), letting attackers trigger out-of-bounds write via crafted nslot value, exploit requires untrusted input from medium or userspace."
url: https://panop.io/threat-heartbeat/CVE-2026-89559/
---

# CVE-2026-89559 Linux Kernel libnvdimm - Integer Overflow

Linux kernel libnvdimm contains an integer overflow caused by 32-bit multiplication wraparound in \_\_nd\_label\_validate(), letting attackers trigger out-of-bounds write via crafted nslot value, exploit requires untrusted input from medium or userspace.

CVSS base score 7.8 /10

High

CISA KEV

Not listed

Public exploit

None known

EPSS

0.17% chance of exploitation in 30 days

[View the NVD record ↗](https://nvd.nist.gov/vuln/detail/CVE-2026-89559)

## Details

Type

Integer Overflow

Impact

Remote Code Execution, Denial Of Service

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Published

11 September 2026

Updated

15 October 2026

## Vendor fix

Update to the latest Linux kernel version containing the fix for \_\_nd\_label\_validate() integer overflow.

Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.

## References

- [https://nvd.nist.gov/vuln/detail/CVE-2026-89559](https://nvd.nist.gov/vuln/detail/CVE-2026-89559)
- [https://git.kernel.org/stable/c/1c391696d2791f82ae462e11da9a0d96f90b240c](https://git.kernel.org/stable/c/1c391696d2791f82ae462e11da9a0d96f90b240c)
- [https://git.kernel.org/stable/c/6030597ec683d1e5b46445f888bb5c7776b5a0c4](https://git.kernel.org/stable/c/6030597ec683d1e5b46445f888bb5c7776b5a0c4)
- [https://git.kernel.org/stable/c/93967bfb17dab66642c57e609c99e1a91fe11278](https://git.kernel.org/stable/c/93967bfb17dab66642c57e609c99e1a91fe11278)
- [https://git.kernel.org/stable/c/b4975f2ff6c82adc24ae547f029f82530ba43cfe](https://git.kernel.org/stable/c/b4975f2ff6c82adc24ae547f029f82530ba43cfe)
- [https://git.kernel.org/stable/c/037770686126155eafc44501312989e2837b9659](https://git.kernel.org/stable/c/037770686126155eafc44501312989e2837b9659)
- [https://git.kernel.org/stable/c/09e649117c54b7e1c004f22eaa19efbadd9ac856](https://git.kernel.org/stable/c/09e649117c54b7e1c004f22eaa19efbadd9ac856)
- [https://git.kernel.org/stable/c/69a734359639fca16a0dd73ab17a34943e76c68b](https://git.kernel.org/stable/c/69a734359639fca16a0dd73ab17a34943e76c68b)
- [https://git.kernel.org/stable/c/e057efcc9c71d90099d9ee00bed0748d0e9fd586](https://git.kernel.org/stable/c/e057efcc9c71d90099d9ee00bed0748d0e9fd586)

[← All CVEs](https://panop.io/threat-heartbeat/)

## What this record can't tell you

- Whether you run the affected software, and where
- Whether an attacker can actually reach and exploit it
- The misconfigurations that never get a CVE number
- What it would cost the business, ranked into what to fix first

Panop answers these inside your environment, for this CVE and every other finding.

[Book a demo](https://panop.io/demo)