CVE-2026-72030

A flaw was found in the Linux kernel's libata-core component. A malicious device, or a local attacker with control over a device, could provide an invalid count for concurrent positioning ranges. This improper handling of input could lead to a buffer overflow, potentially causing the system to crash and resulting in a denial of service.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because triggering it requires physical access to attach a malicious ATA storage device or control over emulated hardware in a virtualized guest environment. Successful exploitation causes memory corruption during disk identification routines, resulting in a local kernel crash and system denial of service. The issue does not permit remote exploitation or arbitrary code execution under standard deployment conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.