CVE-2026-110036
Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices
- State
- Published
- Severity
- 3.3 Low
- Published
- Oct 13, 2026
- Updated
- Oct 14, 2026
- Reserved
- Oct 13, 2026
Description
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.3 Low | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L | redhat |
Weaknesses
- CWE-190 Integer Overflow or Wraparound
Affected Products
| Product | Versions |
|---|---|
Red Hat Enterprise Linux 10Red Hat | |
Red Hat Enterprise Linux 6Red Hat | |
Red Hat Enterprise Linux 7Red Hat | |
Red Hat Enterprise Linux 8Red Hat | |
Red Hat Enterprise Linux 9Red Hat | |
Red Hat OpenShift Container Platform 4Red Hat | |
Red Hat OpenShift Container Platform 4Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2026-110036vdb-entry
- RHBZ#2474403issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.