CVE-2026-68145

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write occurs in the iomap subsystem when handling zero-length ranges. The functions ifs set range dirty() and ifs set range uptodate() calculate the last blk value using a formula that causes an unsigned subtraction underflow to SIZE MAX when both off and len are 0. This results in excessively large last blk and nr blks values, leading the bitmap set() function to write data beyond the ifs->state allocation. This condition is reachable via iomap write end() when copy folio from iter atomic() returns 0 and the folio is already uptodate, causing iomap set range dirty() to be called with a copied value of 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.