CVE-2026-45991

A flaw was found in the Linux kernel's Universal Disk Format (UDF) filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially causing system instability, denial of service, or arbitrary code execution.

Because this vulnerability requires that an attacker can mount a malicious UDF filesystem, they must either have elevated privileges or physical access to a system configured to automount UDF volumes via e.g. an optical disc drive. For that reason, Red Hat assesses that the impact of this vulnerability is Moderate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.