CVE-2026-52992

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write occurs in the ADFS file system when processing a crafted image with a zero zone count. During boot block validation, if the nzones variable is 0, the adfs read map() function calls kmalloc array(0, ...) which returns a ZERO SIZE PTR. Subsequently, the adfs map layout() function writes to dm[-1], resulting in a memory write before the allocated buffer. This issue is triggered when adfs validate bblk() fails to reject ADFS disc records with a zero zone count for new-format images.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.