CVE Database›Document archive›CVE-2026-53320

CVE-2026-53320

kernel: nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 26, 2026

Updated · June 29, 2026

Description

A flaw was found in the Linux kernel's nilfs2 filesystem. A local attacker could exploit this vulnerability by sending a specially crafted input/output control (ioctl) request to the nilfs_ioctl_mark_blocks_dirty() function. By providing a zero block number, the attacker can bypass a critical dead block check, causing the system to attempt operations on a non-existent block. This ultimately leads to a system crash, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-839 · Numeric Range Comparison Without Minimum Check