What is GHSA-f559-vgh2-9hj6?

GHSA-f559-vgh2-9hj6 is a security advisory published by GitHub Security Advisories with Medium severity. NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to...

Which CVE IDs does GHSA-f559-vgh2-9hj6 cover?

GHSA-f559-vgh2-9hj6 covers the following CVE IDs: CVE-2026-55392. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f559-vgh2-9hj6?

GHSA-f559-vgh2-9hj6 has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-f559-vgh2-9hj6MediumCVSS 5.5

NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to...

Vendor

GitHub Security Advisories

Published

June 18, 2026

Last Modified

June 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-55392 →

📋 Description

NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock before bit-shift operations. Attackers supplying crafted NILFS2 images trigger undefined behavior through oversized shifts or out-of-memory conditions, crashing tools like nilfs-tune and dumpseg.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-55392
https://github.com/nilfs-dev/nilfs-utils/issues/26
https://github.com/nilfs-dev/nilfs-utils/commit/26efb5daff0757365101035145331b0a5a85d9d9
https://github.com/advisories/GHSA-f559-vgh2-9hj6