CVEvulnerability
CVE-2026-110036
3.3 LOW
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-10-13
- Last modified
- 2026-10-14
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-190
Description
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://access.redhat.com/security/cve/CVE-2026-110036 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2474403 bugzilla.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2474403 bugzilla.redhat.com