Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: dm raid: fixed the KASAN warning in raid5adddisks. There is a KASAN warning in raid5adddisk when running the LVM testsuite. The warning occurs during the test lvconvert-raid-reshape-lineartoraid6-single-type.sh. We fixed this...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dm raid: fixed access issues beyond the end of the raid member array. When the dm-raid table is loaded using raidctr, dm-raid allocates an array rs-devsrs-raiddisks for the raid device members. rs-raiddisks is determined by the...

libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

ROS-20260925-73-0012

The vulnerability of the parsefeatures function in the drivers/md/dm-flakey.c driver for multiple device types RAID and LVM in the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CLEANSTART-2026-TN85120 Security fix for CVE-2026-35172 applied in: gitness 3.0.1-r1, gitness 3.1.1-r1, gitness 3.2.0-r1, gitness 3.3.0-r2, lvm-driver 1.7.0-r1

CVE-2026-35172 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NX58071 Security fix for CVE-2026-33540 applied in: gitness 3.0.1-r1, gitness 3.1.1-r1, gitness 3.2.0-r1, gitness 3.3.0-r2, lvm-driver 1.7.0-r1

CVE-2026-33540 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UD04804 Security fixes in lvm-driver 1.10.0-r1

Package lvm-driver version 1.10.0-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-NR61810 Security fixes in lvm-driver 1.10.0-r3

Package lvm-driver version 1.10.0-r3 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-IG94810 Security fixes in lvm-driver 1.10.0-r4

Package lvm-driver version 1.10.0-r4 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-DR02827 Security fixes in lvm-driver 1.10.0-r2

Package lvm-driver version 1.10.0-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-89961

Package lvm-driver version 1.10.0-r3 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-89945

Package lvm-driver version 1.10.0-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-89970

Package lvm-driver version 1.10.0-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

DEBIAN-CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

UBUNTU-CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

EUVD-2026-58594

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...