What is GHSA-2f2v-c79p-8x4x?

GHSA-2f2v-c79p-8x4x is a security advisory published by GitHub Security Advisories with Medium severity. A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager (LVM)...

Which CVE IDs does GHSA-2f2v-c79p-8x4x cover?

GHSA-2f2v-c79p-8x4x covers the following CVE IDs: CVE-2026-19617. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2f2v-c79p-8x4x?

GHSA-2f2v-c79p-8x4x has a CVSS v3 base score of 5.7, published by GitHub Security Advisories.

GHSA-2f2v-c79p-8x4xMediumCVSS 5.7

A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager (LVM)...

Vendor

GitHub Security Advisories

Published

August 14, 2026

Last Modified

August 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-19617 →

📋 Description

A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the metadata to crash. This vulnerability results in a Denial of Service (DoS) for affected systems.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-19617
https://access.redhat.com/security/cve/CVE-2026-19617
https://bugzilla.redhat.com/show_bug.cgi?id=2514626
https://github.com/advisories/GHSA-2f2v-c79p-8x4x