---
id: CVE-2026-110036
title: A flaw was found in device-mapper-persistent-data
summary: >-
  A flaw was found in device-mapper-persistent-data. A local attacker can cause
  a Denial of Service (DoS) by inducing a user or system tool to process crafted
  device metadata containing an excessively large block index. An arithmetic
  error…
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'
cwe:
  - CWE-190
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T19:30:29.797'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110036'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-110036'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2474403'
    label: secalert@redhat.com
tags:
  - nvd
ingestedAt: '2026-10-13T19:43:28.932Z'
---

## Overview

A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.