Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2026-55392

NILFS utilities - Undefined Behavior and Out-of-Memory via Unvalidated s_log_block_size

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock before bit-shift operations. Attackers supplying crafted NILFS2 images trigger undefined behavior through oversized shifts or out-of-memory conditions, crashing tools like nilfs-tune and dumpseg.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nilfs-dev nilfs-utils

Default version status: unaffected

  • 0 to ≤ 2.3.0affected
  • 26efb5daff0757365101035145331b0a5a85d9d9unaffected
pkg:github/nilfs-dev/nilfs-utils

References