CVE-2026-64359

kernel: nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 29, 2026

Description

A flaw was found in the Linux kernel's nilfs2 filesystem. This vulnerability occurs because user-supplied segment numbers are not properly validated before processing CLEAN_SEGMENTS ioctl requests. An attacker, by providing out-of-range segment numbers, can trigger excessive logging. This prolonged logging can cause the system to become unresponsive, leading to a Denial of Service (DoS) where legitimate operations are blocked.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-413 · Improper Resource Locking