Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
CVE-2026-110036: Red Hat Enterprise Linux may crash on bad device data
CVE-2026-110036 · published 5 days ago
Summary
A bug in the device-mapper-persistent-data component used by Red Hat Enterprise Linux can cause the system to stop working if it reads specially crafted device information. An arithmetic mistake leads the software to panic and terminate, causing a denial of service. Apply the latest Red Hat updates or patches that fix this issue to keep systems running smoothly.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| red hat | red hat enterprise linux 10 | All versions |
| red hat | red hat enterprise linux 6 | All versions |
| red hat | red hat enterprise linux 7 | All versions |
| red hat | red hat enterprise linux 8 | All versions |
| red hat | red hat enterprise linux 9 | All versions |
| red hat | red hat openshift container platform 4 | All versions |
Original advisory text
Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-190Integer Overflow
Timeline
Published13 Oct 2026
Updated15 Oct 2026
First seen13 Oct 2026
Track software like this
Free during beta