CVE-2026-46002
kernel: ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's ext2 filesystem. A local attacker could create a specially crafted filesystem image with malformed inodes (index nodes) that, when mounted, would not be properly rejected by the ext2_iget() function. This could lead to a kernel warning and potentially a system crash, resulting in a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1288 · Improper Validation of Consistency within Input