CVE-2026-99063

A flaw was found in the Linux kernel's Device Mapper (DM) subsystem. When processing certain input/output control (ioctl) requests with minimal buffer sizes, the interface fails to properly validate that the result buffer's start offset remains within the allocated memory boundaries. A local attacker with administrative privileges can exploit this flaw to cause an out-of-bounds read, leading to the disclosure of sensitive adjacent kernel memory or a system crash resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.