CVE-2026-55392
NILFS utilities - Undefined Behavior and Out-of-Memory via Unvalidated s_log_block_size
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock before bit-shift operations. Attackers supplying crafted NILFS2 images trigger undefined behavior through oversized shifts or out-of-memory conditions, crashing tools like nilfs-tune and dumpseg.
| CWE | CWE-1284 |
| Vendor | nilfs-dev |
| Product | nilfs-utils |
| Published | Jun 18, 2026 |
| Last Updated | Jun 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for nilfs-dev nilfs-utils
Be the first to know when new medium vulnerabilities affecting nilfs-dev nilfs-utils are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
nilfs-dev / nilfs-utils
0 ≤ 2.3.0
References
Credits
Tristan Madani (@TristanInSec)