{"schema":"threatline.record/2","record":{"id":"CVE-2026-110036","aliases":[],"summary":"Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices","details":"A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application to panic and unexpectedly terminate.","categories":["Operating systems"],"product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","source_modified_at":"2026-10-14T15:29:50.882Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","source_modified_at":"2026-10-14T15:29:50.882Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat","versions":[],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","source_modified_at":"2026-10-14T15:29:50.882Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","source_modified_at":"2026-10-14T15:29:50.882Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","source_modified_at":"2026-10-14T15:29:50.882Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","source_modified_at":"2026-10-14T15:29:50.882Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","source_modified_at":"2026-10-14T15:29:50.882Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat","versions":[],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":3.3,"severity":"Low","kev":{"listed":false},"epss":{"probability":0.00137,"percentile":0.02858,"score_date":"2026-10-23"},"published_at":"2026-10-13T18:45:47.168Z","modified_at":"2026-10-14T15:29:50.882Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-110036","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T15:29:50.882Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-110036","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://access.redhat.com/security/cve/CVE-2026-110036","tags":["vdb-entry","x_refsource_REDHAT"]},{"source":"CVE List","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2474403","tags":["exploit"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-14T15:29:09.572041Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-14T15:29:50.882Z","content_hash":"88d477b53973e058e77289aa89673bb27842e4713b34b91f988f3a2b27e1e74e"}}