CVE-2026-93055

A flaw was found in the Linux kernel. When processing Universal Disk Format (UDF) symlink data, a specially crafted input could cause an out-of-bounds read. This occurs because the udf_symlink_filler() function may process a partial pathComponent header, leading to the udf_pc_to_char() function attempting to read beyond its allocated buffer. This vulnerability could potentially lead to information disclosure or a denial of service.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires a local attacker to mount a specially crafted UDF filesystem image or insert corrupted optical storage media. Triggering the flaw requires either administrative privileges to perform mount operations or access to environments where automatic mounting of removable media is enabled. While successful exploitation can trigger an out-of-bounds memory read leading to a kernel crash and denial of service, it does not directly allow arbitrary code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.