CLEANSTART-2026-DQ92316 Security fixes for ghsa-m5vv-6r4h-3vj9 applied in versions: 1.8.1-r2

Security vulnerability affects the lvm-driver package. This issue is resolved in later releases. See references for vulnerability details...

The vulnerability of the clone_dtr() function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types (RAID and LVM), which allows a hacker to cause service failure.

The vulnerability of the clonedtr function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260629-73-0039

The vulnerability in the drivers/md/raid10.c driver for multiple Linux device types RAID and LVM involves incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the verity_fec_decode() function in the drivers/md/dm-verity-fec.c file of the device driver for multiple Linux device types (RAID and LVM), allowing a hacker to cause a service failure.

The vulnerability of the verityfecdecode function in the drivers/md/dm-verity-fec.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2026-47224 NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap buffer-overflow read exists in the LVM2 physical-volume metadata parser in NanaZip via the upstream 7-Zip LvmHandler. The vulnerability is triggered when openin...

PT-2026-48930

Name of the Vulnerable Software and Affected Versions NanaZip versions 3.0.1000.0 through 6.0.1697.0 Description A heap buffer-overflow read exists in the LVM2 physical-volume metadata parser, which is handled via the upstream 7-Zip LvmHandler. This issue occurs when the software opens a speciall...

CLEANSTART-2026-YP53663 Security fixes for ghsa-m5vv-6r4h-3vj9 applied in versions: 1.8.1-r2

Security vulnerability affects the lvm-driver package. This issue is resolved in later releases. See references for vulnerability details...

The vulnerability of the raid10_handle_discard() function in the drivers/md/raid10.c module of the support for multiple device types (RAID and LVM) of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the raid10handlediscard function in the drivers/md/raid10.c module of the Linux device driver for multiple devices RAID and LVM is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CLEANSTART-2026-DM93480 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the lvm-driver package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-UO31069 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the lvm-driver package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

The vulnerability of the raid_resume() function in the drivers/md/dm-raid.c module of the support for multiple device types (RAID and LVM) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the raidresume function in the drivers/md/dm-raid.c module of the Linux support for multiple device types RAID and LVM is related to the lack of checks to ensure that the value is within the minimum range. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the create_log_context() function in the drivers/md/dm-log.c file of the support for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the createlogcontext function in the drivers/md/dm-log.c file of the support for multiple device types RAID and LVM in the Linux kernel is related to insufficient data authentication checks. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the dm_pool_registermetadata_threshold() function in the drivers/md/dm-thin-metadata.c driver for multiple device-based systems (RAID and LVM) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmpoolregistermetadatathreshold function in the drivers/md/dm-thin-metadata.c driver for multiple device-based systems RAID and LVM in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the recovery_request_write() function in the drivers/md/raid10.c module of the Linux operating system’s multi-device driver (RAID and LVM kernel), which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the recoveryrequestwrite function in the drivers/md/raid10.c driver for multiple device-based systems RAID and LVM in the Linux kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker t...

Vulnerability of the validate_region_size() function in the drivers/md/dm-raid.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux operating system. This function allows an attacker to access protected information or cause service failures.

Vulnerability of the validateregionsize function in the drivers/md/dm-raid.c module – The driver for supporting multiple device types RAID and LVM in the Linux operating system relies on buffer overflow attacks. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the raid1_read_request() function in the drivers/md/raid1.c module of the Linux kernel support for multiple devices (RAID and LVM) allows a hacker to cause a service failure.

The vulnerability of the raid1readrequest function in the drivers/md/raid1.c module of the Linux kernel’s device drivers for RAID and LVM systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the raid10_remove_disk() function in the drivers/md/raid10.c file of the Linux device driver for multiple device types (RAID and LVM) allows a attacker to access protected information or cause service failure.

The vulnerability of the raid10removedisk function in the drivers/md/raid10.c file of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the raid5_add_disk() function in the drivers/md/raid5.c module of the Linux kernel support for multiple device types (RAID and LVM) allows a hacker to cause a service failure.

The vulnerability of the raid5adddisk function in the drivers/md/raid5.c module of the Linux support module for multiple devices RAID and LVM is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the r5l_logFlushEndio() function in the drivers/md/raid5-cache.c module of the Linux driver for multiple device types (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the r5llogFlushEndio function in the drivers/md/raid5-cache.c module of the Linux device driver for multiple devices RAID and LVM is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the raid1_remove_disk() function in the drivers/md/raid1.c module of the Linux kernel’s device driver for multiple devices (RAID and LVM), which allows a hacker to cause a service failure.

The vulnerability of the raid1removedisk function in the drivers/md/raid1.c module of the Linux device driver suite, which handles multiple devices such as RAID and LVM, is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...