CVE-2026-93140

A flaw was found in the Linux kernel's Universal Disk Format (UDF) filesystem. When an I/O error occurs during the writing of the Logical Volume Integrity Descriptor (LVID) buffer, the system incorrectly clears a flag indicating the buffer's validity. Subsequent operations, such as remounting the filesystem, can trigger a spurious warning in the kernel's buffer management, even though the in-memory data remains valid. While not directly leading to data corruption, such incorrect warnings can obscure critical system issues or impact system stability.

This vulnerability is rated as Low impact because triggering the condition requires underlying write errors on a mounted UDF filesystem and only produces a non-fatal kernel warning stack trace. Exploitation does not result in privilege escalation or data corruption, and standard enterprise deployments rarely mount writable UDF volumes. Additionally, mounting storage devices typically requires administrative privileges or direct physical access, significantly limiting exposure for unprivileged users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.