CVE-2026-46124

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description The issue exists in the isofs module where isofs fh to dentry() and isofs fh to parent() pass an attacker-controlled block number (ifid->block or ifid->parent block) from an NFS file handle to the isofs export iget() function. The function only rejects blocks equal to 0 before calling isofs iget() and sb bread(). A crafted file handle can force the server to read any in-range block on the backing device as if it were an iso directory record. This allows unrelated bytes from adjacent-partition data on the same block device to be returned to an authenticated NFS client as dentry metadata.

Recommendations Update to kernel-devel-7.0.11-1.1 for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.