CVE-2026-46023

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow exists in the create dirty log() function within the dm mirror component. The calculation *args used = 2 + param count occurs before validating against argc. If a user provides a param count close to UINT MAX via the device mapper table string, the unsigned addition wraps around to a small value, bypassing the argc < *args used check. This overflowed param count is subsequently passed as argc to the dm dirty log create() function, which can lead to out-of-bounds reads on the argv array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.