Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46130

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks (take 3) fec_decode_bufs() assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This assumption is false. Consider v->fec->block_size == 4096 && v->fec->roots == 17 && fio->nbufs == 1, for example. In that case, each call to fec_decode_bufs() consumes v->fec->roots * (fio->nbufs << DM_VERITY_FEC_BUF_RS_BITS) = 272
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:fa2479c4f4e73a46089fa8b19b079e8eb4c52befc974e10e58aecb3b67e38471
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-verity-fec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d47281b9a4472cfd73122393e79fbe76b651e46a","status":"affected","version":"6df90c02bae468a3a6110bafbc659884d0c4966c","versionType":"git"},{"lessThan":"3d1b4e2d8ac0a1a1390a117f61ce0ca1c47e3bcb","status":"affected","version":"6df90c02bae468a3a6110bafbc659884d0c4966c","versionType":"git"},{"lessThan":"430a05cb926f6bdf53e81460a2c3a553257f3f61","status":"affected","version":"6df90c02bae468a3a61…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed2923bc5b433f1ac2832a8c3b8f09f18f9b250578200c4ece622950a6cfbdca · sha256:af3155838a1e55ec… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/md/dm-verity-fec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed2923bc5b433f1ac2832a8c3b8f09f18f9b250578200c4ece622950a6cfbdca · sha256:af3155838a1e55ec… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-verity-fec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d47281b9a4472cfd73122393e79fbe76b651e46a","status":"affected","version":"6df90c02bae468a3a6110bafbc659884d0c4966c","versionType":"git"},{"lessThan":"3d1b4e2d8ac0a1a1390a117f61ce0ca1c47e3bcb","status":"affected","version":"6df90c02bae468a3a6110bafbc659884d0c4966c","versionType":"git"},{"lessThan":"430a05cb926f6bdf53e81460a2c3a553257f3f61","status":"affected","version":"6df90c02bae468a3a61…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed2923bc5b433f1ac2832a8c3b8f09f18f9b250578200c4ece622950a6cfbdca · sha256:af3155838a1e55ec… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/md/dm-verity-fec.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ed2923bc5b433f1ac2832a8c3b8f09f18f9b250578200c4ece622950a6cfbdca · sha256:af3155838a1e55ec… · /containers/cna/affected/1

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/3d1b4e2d8ac0a1a1390a117f61ce0ca1c47e3bcb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed2923bc5b433f1ac2832a8c3b8f09f18f9b250578200c4ece622950a6cfbdca · sha256:af3155838a1e55ec… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/430a05cb926f6bdf53e81460a2c3a553257f3f61"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed2923bc5b433f1ac2832a8c3b8f09f18f9b250578200c4ece622950a6cfbdca · sha256:af3155838a1e55ec… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d47281b9a4472cfd73122393e79fbe76b651e46a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ed2923bc5b433f1ac2832a8c3b8f09f18f9b250578200c4ece622950a6cfbdca · sha256:af3155838a1e55ec… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer