CVE-2026-110036: Red Hat Enterprise Linux 10, грешка в паметта

Описание

Оригинално описание

A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.

Засегнати продукти

• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat OpenShift Container Platform 4
• Red Hat Red Hat OpenShift Container Platform 4

Вид слабост

• CWE-190 Целочислено препълване отгоре

История

Други уязвимости в Red Hat Red Hat Enterprise Linux 10

• 7.1CVE-2026-82976
• 6.5CVE-2026-121259
• 6.5CVE-2026-119843
• 6.5CVE-2026-120831
• 7.4CVE-2026-120830

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-110036
• https://nvd.nist.gov/vuln/detail/CVE-2026-110036
• https://access.redhat.com/security/cve/CVE-2026-110036
• https://bugzilla.redhat.com/show_bug.cgi?id=2474403