A buffer overflow exists in the Linux kernel’s dm-ioctl interface when carrying out list_version_get_info. The code writes 16 bytes into a 12-byte structure, creating a classic buffer overflow that can corrupt adjacent kernel memory. This flaw falls under CWE-131 (Incorrect Size Calculation). While the description does not state the exact consequences, overflowing kernel memory could lead to system instability or crash, and in some scenarios it might be leveraged to gain higher privileges if the attacker can control the vulnerable input.

All Linux kernel releases that include the device‑mapper (dm) module and have not yet integrated commit 29536a9ff146d9bbd618959857ed2e691cda1d21 or later. The flaw is relevant to any system that uses dm-ioctl for device‑mapper operations and has not applied the size‑calculation fix.

The flaw has a CVSS score of 5.5, indicating a medium severity. The EPSS score is less than 1%, suggesting a low probability of exploitation in the wild. It is not listed in the CISA KEV catalog and no public exploits have been reported. The likely attack vector is local through the dm‑ioctl interface, requiring the attacker to have the ability to issue ioctl calls on a device‑mapper device. This inference follows from the nature of the bug but is not explicitly stated in the vulnerability description.