CVE-2026-19617

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Allocation of Resources Without Limits or Throttling pada redhat hardened images, redhat openshift container platform +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the metadata to crash. This vulnerability results in a Denial of Service (DoS) for affected systems.

Rincian

Terbit di NVD

14 Agustus 2026

Terakhir diubah

2 Oktober 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber redhat.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-19617 mitigasi · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2514626 issue tracking · advisory vendor
• https://access.redhat.com/errata/RHSA-2026:73989