CVE-2026-46023 dm mirror: fix integer overflow in create_dirty_log()

🗓️ 27 May 2026 12:56:28Reported by LinuxType

Fix integer overflow in dm mirror create_dirty_log to prevent out-of-bounds reads from large param_count.

Reporter	Title	Published	Views	Family All 230
CNNVD	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-46023	27 May 202612:56	–	cve
Debian CVE	CVE-2026-46023	27 May 202612:56	–	debiancve
EUVD	EUVD-2026-32404	27 May 202612:56	–	euvd
Microsoft CVE	dm mirror: fix integer overflow in create_dirty_log()	28 May 202608:11	–	mscve
NVD	CVE-2026-46023	27 May 202614:17	–	nvd
OPENSUSE Linux	kernel-devel-7.0.11-1.1 on GA media (moderate)	8 Jun 202600:00	–	opensuse
OSV	BELL-CVE-2026-46023	28 May 202606:10	–	osv
OSV	DEBIAN-CVE-2026-46023	27 May 202614:17	–	osv
OSV	ECHO-4027-1FDD-CA73	28 May 202604:57	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/md/dm-raid1.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "e5e0ae3237584ebef510366c4cb3d5cc7c22b610",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "249c831183fb806c8e3b14c7c4c1d2fb68cf37fb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "ae59b3025609d5a0a39cf5b2b94e2467f6231573",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "35f6b3281efd44d19110574663bc17a610bc73b9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "47dad9eea75d33212d3d2cea10e7ed6a1bfc0713",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "87c99a50e0fdc68a5b9b52a94d49452cd3ff02ca",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "17a08791d428885d00e510864283a7b839792368",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "4c788c6f921b22f9b6c3f316c4a071c05683e7de",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/md/dm-raid1.c"
    ],
    "versions": [
      {
        "version": "2.6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.140",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.86",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.27",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.4",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/35f6b3281efd44d19110574663bc17a610bc73b9
git	www.git.kernel.org/stable/c/e5e0ae3237584ebef510366c4cb3d5cc7c22b610
git	www.git.kernel.org/stable/c/17a08791d428885d00e510864283a7b839792368
git	www.git.kernel.org/stable/c/4c788c6f921b22f9b6c3f316c4a071c05683e7de
git	www.git.kernel.org/stable/c/47dad9eea75d33212d3d2cea10e7ed6a1bfc0713
git	www.git.kernel.org/stable/c/ae59b3025609d5a0a39cf5b2b94e2467f6231573
git	www.git.kernel.org/stable/c/249c831183fb806c8e3b14c7c4c1d2fb68cf37fb
git	www.git.kernel.org/stable/c/87c99a50e0fdc68a5b9b52a94d49452cd3ff02ca

01 Jun 2026 16:17Current

EPSS0.00032