CVE-2026-45915

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fat: avoid parent link count underflow in rmdir

Corrupted FAT images can leave a directory inode with an incorrect i_nlink (e.g. 2 even though subdirectories exist). rmdir then unconditionally calls drop_nlink(dir) and can drive i_nlink to 0, triggering the WARN_ON in drop_nlink().

Add a sanity check in vfat_rmdir() and msdos_rmdir(): only drop the parent link count when it is at least 3, otherwise report a filesystem error.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < 7fe0de287e931e07cb96ecf1f449b2ebdb0e1115; >= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < 9894c79fd9466612d0514be157b5c30cd93aa645; >= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < cd569b87378b9c33ae13c23d6bb9d205d66f7c4b; >= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < d3b7ffa90f613938128432c7b2f35b7aa4bdd86b; >= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < 955c5d670b5ae07c78f4345e23a895638db96ce1; >= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < 17866f8a0822d414cb02e621cf003a7d04396ef8; >= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < d0bb592fa9def2bace90ac8926c0a1d6fa8c1aa0; >= 9a53c3a783c2fa9b969628e65695c11c3e51e673, < 8cafcb881364af5ef3a8b9fed4db254054033d8a
LinuxLinux2.6.19

References

Timeline

Published
May 27, 2026
Last modified
Nov 6, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-459167.8In the Linux kernel, the following vulnerability has been resolved: power: supply: sbs-battery: Fix use-after-free in power_supply_changed(CVE-2026-459175.5In the Linux kernel, the following vulnerability has been resolved: ipvs: do not keep dest_dst if dev is going down There is race between CVE-2026-459185.5In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - don't deref NULL sk_socket member after tcp_close() When dCVE-2026-459195.5In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rto_next_cpu() CPU0 becomes CVE-2026-45925.6A security vulnerability has been detected in kalcaddle kodbox 1.64. This impacts the function loginAfter/tfaVerify of the file /workspace/sCVE-2026-459207.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs shutdown fstests test gCVE-2026-459215.5In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() CVE-2026-459225.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler The UCVE-2026-459235.5In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking catc_probe() fills threCVE-2026-459245.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths TheCVE-2026-459255.5In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_lookup() In thermal_ofCVE-2026-459265.5In the Linux kernel, the following vulnerability has been resolved: rust: pwm: Fix potential memory leak on init error When initializing a