CVE-2026-110036— Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 device-mapper-persistent-data 中发现了一个漏洞。本地攻击者可以通过诱导用户或系统工具处理包含超大块索引的伪造设备元数据，从而引发拒绝服务（DoS）。同步块读取逻辑中的算术错误会导致应用程序 panic 并意外终止。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 7
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 6 | any |
unknown |
| Red Hat | Red Hat Enterprise Linux 7 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 8 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 9 | any |
unknown |
| Red Hat | Red Hat OpenShift Container Platform 4 | any |
affected |
any |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110036
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
| Red Hat | Red Hat OpenShift Container Platform 4 | - |
cpe:/a:redhat:openshift:4
|
|
| Red Hat | Red Hat OpenShift Container Platform 4 | - |
cpe:/a:redhat:openshift:4
|
|
II. Public POCs for CVE-2026-110036
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110036
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-110036 (2)
Same Patch Batch · Red Hat · 2026-10-13 · 9 CVEs total
| CVE-2026-109832 | 7.5 HIGH | Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_int |
| CVE-2026-88833 | 6.5 MEDIUM | Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial |
| CVE-2026-109833 | 5.9 MEDIUM | Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer han |
| CVE-2026-105460 | 5.5 MEDIUM | Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_l |
| CVE-2026-88838 | 5.5 MEDIUM | Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restr |
| CVE-2026-109976 | 4.7 MEDIUM | Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound |
| CVE-2026-88834 | 3.7 LOW | Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds |
| CVE-2026-109854 | 2.5 LOW | M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
-
CVE-2026-110926
Openssh: openssh: shared lz77 compression dictionary leaks p -
CVE-2026-110925
Openssh: openssh: '$' and '\' in a command-line username exp -
CVE-2026-110923
Openssh: openssh: sftp can write outside the destination dir -
CVE-2026-110777
Evolution-data-server: local file disclosure via attach file -
CVE-2026-109968
Clevis: clevis: pkcs#11 luks passphrase logged in plaintext
Same vendor: Red Hat
-
CVE-2026-110926
Openssh: openssh: shared lz77 compression dictionary leaks p -
CVE-2026-110925
Openssh: openssh: '$' and '\' in a command-line username exp -
CVE-2026-110923
Openssh: openssh: sftp can write outside the destination dir -
CVE-2026-110777
Evolution-data-server: local file disclosure via attach file -
CVE-2026-86849
Dpdk: dpdk: integer overflow combined with missing validatio
Same weakness: CWE-190
-
CVE-2026-107348
Integer overflow causes an infinite loop in message buffer g -
CVE-2026-92160
F´: SendPartial Integer Overflow Leading to Assertion DoS -
CVE-2026-92154
F´: File size bounds bypass in Svc::FileUplink via unsigned -
CVE-2026-101972
Junos OS and Junos OS Evolved: Malformed OSPF packets causes -
CVE-2026-92158
F´: FpySequencer Integer Overflow in Stack Offset/Size Valid
V. Comments for CVE-2026-110036
No comments yet