CVE-2026-110036

low

Description

A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99241

https://bugzilla.redhat.com/show_bug.cgi?id=2474403

https://access.redhat.com/security/cve/CVE-2026-110036

Details

Source: Mitre, NVD

Published: 2026-10-13

Updated: 2026-10-14

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

Severity: Low

CVSS v3

Base Score: 3.3

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Severity: Low

EPSS

EPSS: 0.00137