CVE-2026-46303

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.12-1.1

Description The rock continue() function in the isofs component reads the rs->cont extent from the Rock Ridge CE record and passes it to sb bread() without verifying if the block number is within the mounted ISO 9660 volume. This allows a crafted ISO image, mounted via udisks2 or CAP SYS ADMIN, to point to an out-of-range block or blocks belonging to an adjacent filesystem on the same block device. While out-of-range reads are handled cleanly, in-range reads of adjacent filesystem data can lead to a narrow information leak, as the data is parsed as Rock Ridge records and only the text of SL sub-records is exposed to userspace through readlink().

Recommendations Update to kernel-devel-7.0.12-1.1 for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.