EUVD-2026-58594
GHSA-2f2v-c79p-8x4x
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack arrives via block-device metadata (AV:L); no target-system privileges needed to supply malicious storage (PR:N); automated LVM scans require no user action (UI:N); impact is pure availability - process crash, no data exposure (C:N/I:N/A:H).
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Lifecycle Timeline
3DescriptionCVE.org
A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the metadata to crash. This vulnerability results in a Denial of Service (DoS) for affected systems.
AnalysisAI
Stack exhaustion in libdm's LVM metadata configuration parser allows any LVM command processing attacker-crafted block device metadata to crash, resulting in denial of service on affected Linux systems. The flaw is exploitable in shared storage, SAN, or virtualization environments where an adversary can supply a maliciously structured block device to a target system running LVM2. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concrete preconditions: (1) the target system must use LVM and have the libdm-based LVM2 stack installed and active; (2) the attacker must be able to write or present a block device containing crafted LVM metadata to the target system - this implies control over shared storage infrastructure (SAN, iSCSI, NFS-backed VM images, or hypervisor-controlled virtual disks), not direct network socket access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N, 5.7) contains three significant inconsistencies with the vulnerability description: (1) the vector records no availability impact (A:N) despite an explicitly described crash/DoS outcome; (2) it records confidentiality and integrity impacts (C:L/I:L) not supported by the description, which attributes only DoS; and (3) the 'remote attacker' framing in the description conflicts with AV:L. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Monitor the Red Hat Security Advisory at https://access.redhat.com/security/cve/CVE-2026-19617 for patched lvm2/device-mapper package versions; apply updates via dnf update lvm2 device-mapper once a patched release is published. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Hardened Images
View allAuthentication bypass in GnuTLS affects servers that enable the RSA-PSK key exchange, where the PSK identity comparison
Denial of service in GnuTLS affects the Datagram Transport Layer Security (DTLS) packet reordering logic, where the comp
Stack-based buffer overflow in libssh's SFTP server allows a connected client to crash the server or potentially execute
Libarchive fails to properly validate the pz_log2_bs field in ISO9660 Rock Ridge extensions during zisofs decompression,
Heap-based buffer overflow in libsolv's repo_add_solv() function enables a remote unauthenticated attacker to crash the
Stack-based buffer overflow in libsolv's Debian metadata parser allows remote, unauthenticated attackers to cause a deni
libxml2's xmlCatalogXMLResolveURI function is vulnerable to uncontrolled recursion when processing self-referencing dele
Shell metacharacter injection in libssh's ProxyCommand handling allows a crafted SSH username to break out of the intend
A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML
Same technique Denial Of Service
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today