All vulnerabilities

Servers and applications

CVE-2026-99063

dm ioctl: don't let data_start run past the buffer

Severity
Unrated
Published
23 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
5.15.224, 6.1.191, 6.6.160, 6.12.113, 6.18.57, 7.2.11
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 6.19 before 7.2.11
  • From 6.13 before 6.18.57
  • From 6.7 before 6.12.113
  • From 6.2 before 6.6.160
All 7 release lines
  • From 2.6.25 before 5.10.273
  • From 5.11 before 5.15.224
  • From 5.16 before 6.1.191
  • From 6.2 before 6.6.160
  • From 6.7 before 6.12.113
  • From 6.13 before 6.18.57
  • From 6.19 before 7.2.11

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-99063