CVE Explorer

CVE-2026-43067

In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for blocks for indirect mapped blocks Commit 4865c768b563 ("ext4: always allocate blocks only from groups inode can use") restricts what blocks will be allocated for indirect block based files to block numbers that fit within 32-bit block numbers. However, when using a review bot running on the latest Gemini LLM to check this commit when backporting into an LTS based kernel, it raised th

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2bdaa0c2a756c99402f1f414931a7d0bdbed943bf45d7b9b7b38bfe7e85b62e9

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ext4/mballoc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f89bba144938921a2249237ad04a0183ff3f8930","status":"affected","version":"9d89b9d55e25cb340c5b4b769876edc551b7a9ff","versionType":"git"},{"lessThan":"83170a05908b6cf2fb3235d3065bf613ff866f3c","status":"affected","version":"1b0edd6022a3f44ce87fea9959a9310f4628fbea","versionType":"git"},{"lessThan":"4bec4a498ce86314d470ae6144120461f2138c29","status":"affected","version":"9eea2f57d11b30049ff996ac3eff…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ext4/mballoc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6.1.168","status":"affected","version":"6.1.167","versionType":"semver"},{"lessThan":"6.6.134","status":"affected","version":"6.6.130","versionType":"semver"},{"lessThan":"6.12.80","status":"affected","version":"6.12.77","versionType":"semver"},{"lessThan":"6.18.21","status":"affected","version":"6.18.14","versionType":"semver"},{"lessThan":"6.19.11","status":"affected","version":"6.19.4","versio…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/ext4/mballoc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6.1.168","status":"affected","version":"6.1.167","versionType":"semver"},{"lessThan":"6.6.134","status":"affected","version":"6.6.130","versionType":"semver"},{"lessThan":"6.12.80","status":"affected","version":"6.12.77","versionType":"semver"},{"lessThan":"6.18.21","status":"affected","version":"6.18.14","versionType":"semver"},{"lessThan":"6.19.11","status":"affected","version":"6.19.4","versio…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/metrics/0/cvssV3_1

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/12624c5b724a81e14e532972b40d863b0de3b7d1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/2a368ccddfc492a0aa951e2caef2985f20e96503"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/4bec4a498ce86314d470ae6144120461f2138c29"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/83170a05908b6cf2fb3235d3065bf613ff866f3c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/bb81702370fad22c06ca12b6e1648754dbc37e0f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/f89bba144938921a2249237ad04a0183ff3f8930"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5cd68c7f4c6da4808c8ff057c682e78ce83cd7adaed6d489891b5db6d1234d3e · sha256:3640dd8e8669c147… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer