CVE-2026-53059

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow exists in the device-mapper log (dm log) component. The region count local variable in the create log context() function is declared as a 32-bit unsigned integer, while the dm sector div up() function returns a 64-bit sector t value. When a device-mapper target has a large ti->len combined with a small region size, the result of the division can exceed the maximum value of a 32-bit integer. This truncation leads to the allocation of clean bits, sync bits, and recovering bits buffers that are significantly smaller than required. Subsequent log operations, including log set bit(), log clear bit(), and log test bit(), use indices based on the full 64-bit region space, resulting in out-of-bounds writes to kernel heap memory allocated via vmalloc. This flaw can be exploited by a local attacker to cause a kernel crash, leading to a Denial of Service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.