Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-55392 →
DEBIAN-CVE-2026-55392
NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock bef...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock before bit-shift operations. Attackers supplying crafted NILFS2 images trigger undefined behavior through oversized shifts or out-of-memory conditions, crashing tools like nilfs-tune and dumpseg.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
nilfs-tools
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
nilfs-tools
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
nilfs-tools
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory security-tracker.debian.org