CVE Explorer

CVE-2026-46124

In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofs_export_iget isofs_fh_to_dentry() and isofs_fh_to_parent() pass an attacker- controlled block number (ifid->block or ifid->parent_block) from the NFS file handle to isofs_export_iget(), which only rejects block == 0 before calling isofs_iget() and ultimately sb_bread(). A crafted file handle with fh_len sufficient to pass the check added by commit 0405d4b63d08 ("isofs:

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:cb6c0b2d2e73a218f204ea5b86281dd3190e1facbcead1b58cfb9ff4ee0ee23c

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/isofs/export.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ee0024f5a7e3c73aa253869fae9650ae054093ca","status":"affected","version":"5e7de55602c61c8ff28db075cc49c8dd6989d7e0","versionType":"git"},{"lessThan":"31dbb4ba0f719ae7774e4c0c95172c9bf81692f5","status":"affected","version":"63d5a3e207bf315a32c7d16de6c89753a759f95a","versionType":"git"},{"lessThan":"908a76f0b1038035e6ebb4f2293ce079f92e0a02","status":"affected","version":"0fdafdaef796816a9ed0fd7ac812…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/isofs/export.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.15"},{"lessThan":"6.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrE…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/0a1af74ae2177bda3aee0837a0546309aa539d0d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/24376458138387fb251e782e624c7776e9826796"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/31dbb4ba0f719ae7774e4c0c95172c9bf81692f5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/4c721a1d9b3c4fcaf59cc9b2281e3ec5a043e1a6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/908a76f0b1038035e6ebb4f2293ce079f92e0a02"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/afbafeddf23db13fe2edb2d5c0bf4bbb13d7881b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/bb0988ed4f2e26d59bbb58f644cb3a55b7521e21"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/ee0024f5a7e3c73aa253869fae9650ae054093ca"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:eed81e78d47a8e09564e11f0c84f946ee292d449b920a6ec5ba37bdbdb24c46f · sha256:274818ec6eea3bc5… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer