A flaw in libdm's Logical Volume Manager (LVM) metadata parser allows a local attacker to create maliciously crafted deeply nested LVM metadata configurations. This causes uncontrolled recursion in the configuration parser, exhausting the stack and crashing any LVM command that reads the metadata. The vulnerability results in a denial of service condition on affected systems. It primarily affects systems where untrusted users have write access to LVM metadata, such as shared or externally-attached storage environments.

The vulnerability causes denial of service by crashing LVM commands due to stack exhaustion from uncontrolled recursion in the metadata parser. There is no impact on confidentiality or integrity. The attack requires local access and user interaction to trigger the condition.

Red Hat advises avoiding importing LVM physical volumes from untrusted sources without inspecting the metadata first. Systems using LVM on shared or externally-attached storage should restrict write access to the underlying block devices to trusted administrators only. No official fix or patch is currently confirmed; check the Red Hat advisory for updates. These mitigations reduce the risk by limiting attacker ability to supply malicious LVM metadata.