CVE-2026-46130

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the fec decode bufs() function within the dm-verity-fec component. The issue occurs because the function incorrectly assumes that parity bytes of the first Reed-Solomon (RS) codeword are never split across parity blocks. When specific non-default values for fec roots are used and memory is low, preventing the allocation of the maximum number of buffers, the code may attempt to read parity bytes beyond the boundary of the parity block buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.