CVE-2026-110036

EUVD-2026-99241
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 LOW
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 2.78%
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2026-110036
https://bugzilla.redhat.com/show_bug.cgi?id=2474403
https://bugzilla.redhat.com/show_bug.cgi?id=2474403