CVE Explorer

CVE-2026-46294

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl in the function retrieve_status: 1. The code in retrieve_status checks that the output string fits into the output buffer and writes the output string there 2. Then, the code aligns the "outptr" variable to the next 8-byte boundary: outptr = align_ptr(outptr); 3. The alignment doesn't check overflow, so outptr

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:18b25661ac6d22117a18aaffb33f0b127fa37dc30294616ab0cfdee32640c96d

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/md/dm-ioctl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c8c5311237448f6ffeecc9aec2362e3692623668","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"448ee8fb79c26a26599ffa4b2adeb4322d3d3d8c","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"526ff9126a0ae087b65726e1faf31114c718020d","status":"affected","version":"1da177e4c3f41524e886b7f1…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/md/dm-ioctl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"les…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/2fa49cc884f6496a915c35621ba4da35649bf159"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/448ee8fb79c26a26599ffa4b2adeb4322d3d3d8c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/526ff9126a0ae087b65726e1faf31114c718020d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/5af6a879e915ae7bcd83695c316ebb32e1c61bc2"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/8daa6c708ef524089ae43f2aed9190acb26d7df8"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/c8c5311237448f6ffeecc9aec2362e3692623668"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/d271631023cbe1cbe7c31a0275ab797883be6e0a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/f0b0b09d9840838ae77ccdd6a62de0daef4e6e0a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:769caf104532d9cf554eccfcffb3e8e82be6f9e64be45271f738249afb0eacc2 · sha256:0490d30dc632637d… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer