CVE-2026-114038

Name of the Vulnerable Software and Affected Versions device-mapper-multipath (affected versions not specified)

Description A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This can lead to the exposure of unintended daemon memory, resulting in information disclosure, or cause the daemon to crash, leading to a Denial of Service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.