EUVD-2026-55529

In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmapset with zero-length range ifssetrangedirty and ifssetrangeuptodate compute lastblk as off + len - 1 iblkbits. When off is 0 and len is 0, the unsigned subtraction underflows to SIZEMAX, producing a...

CVE-2026-68145

Summary: The CVE affects the Linux kernel iomap path, specifically the functions ifs_set_range_dirty() and ifs_set_range_uptodate() . The root cause is the calculation of the last block as (off + len - 1) >> i_blkbits. When off is 0 and len is 0, unsigned subtraction underflows to SIZE_MAX,...

Absence of Start-End Time Validation in Range Creation

Lines of code Vulnerability details The code allows the creation of a Range structure without ensuring that startTime is strictly less than endTime. The absence of this validation might lead to unintended behavior or logical errors in functionalities that rely on the order of these timestamps...