CVE-2026-53059

A flaw was found in the Linux kernel's device-mapper log (dm log) component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log operations. Successful exploitation of this flaw can cause a kernel crash, resulting in a Denial of Service (DoS) for the affected system.

This vulnerability is rated as Moderate severity because exploitation requires administrative privileges (specifically CAP_SYS_ADMIN) to configure device-mapper tables and construct the specific target parameters needed to trigger the integer overflow. Standard Red Hat Enterprise Linux installations restrict device-mapper management to privileged administrators, preventing unprivileged local or remote users from exercising this code path. Furthermore, triggering the condition requires configuring an unusually large device-mapper target combined with an exceptionally fine log region size, which deviates significantly from typical storage provisioning practices.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.