CVE-2026-110036

LOW
INFO Priority: 0.01 BB Relevance: 32/100
Published: 2026-10-13 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Auth

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: None
I: None
A: Low

Description

A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.

References & Advisories (2)

https://bugzilla.redhat.com/show_bug.cgi?id=2474403
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

32 / 100
✓ No authentication
✓ Low complexity

CVSS Score

3.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS — Exploitation Probability

0.18%
Raw Score 0.001840
Percentile 8.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00184
2026-11-12
0.00184
2026-11-10
0.00184
2026-11-09
0.00184
2026-11-08
0.00184
2026-11-07
0.00184
2026-11-06
0.00184

Intelligence Sources

mitre ref →
nvd ref →