Threats Tagged 'cve-2026-46070'

In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size before accessing journal metadata r5c_recovery_analyze_meta_block() and r5l_recovery_verify_data_checksum_for_mb() iterate over payloads in a journal metadata block using on-disk payload size fields without validating them against the remaining space in the metadata block. A corrupted journal contains payload sizes extending beyond the PAGE_SIZE boundary can cause out-of-bounds reads when accessing payload fields or computing offsets. Add bounds validation for each payload type to ensure the full payload fits within meta_size before processing.

CVE-2026-46070 is a vulnerability related to the md/raid5 component where the payload size is not properly validated before accessing journal metadata. The information provided is limited and does not include technical details beyond this validation issue. There is no CVSS score or detailed impact description available. No known exploits in the wild have been reported. Patch or remediation status is not confirmed from the available data.