THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-46303 (HIGH 8.2) — In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->cont_extent verbatim from the Rock Ridge CE record and passes it to sb_bread() without checking that the block num

[NVD] CVE-2026-46303 (HIGH 8.2) — In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->cont_extent verbatim from the Rock Ridge CE record and passes it to sb_bread() without checking that the block num

lownvdPublished 2026-06-08

CVE-2026-46303 CVSS: 8.2 HIGH Published: 2026-06-08T17:16:48.853

In the Linux kernel, the following vulnerability has been resolved:

isofs: validate Rock Ridge CE continuation extent against volume size

rock_continue() reads rs->cont_extent verbatim from the Rock Ridge CE record and passes it to sb_bread() without checking that the block number is within the mounted ISO 9660 volume. commit e59

Indicators of compromise

CVE-2026-46303cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-46303