CVE-2026-46124

kernel: isofs: validate block number from NFS file handle in isofs_export_iget

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's isofs filesystem. An authenticated NFS (Network File System) peer can exploit this vulnerability by providing a specially crafted file handle. This allows the server to read arbitrary in-range blocks on the backing device, leading to information disclosure where unrelated data from adjacent partitions may be sent to the NFS client as directory entry metadata.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input