CVE-2026-46130

A flaw was found in the Linux kernel's device-mapper verity forward error correction (dm-verity-fec) component. This vulnerability occurs because a function responsible for decoding parity data makes an incorrect assumption about how these data blocks are read. Under specific, non-default configurations and low memory conditions, this can lead to an out-of-bounds read, where the system attempts to access memory beyond its allocated buffer. Such an issue could potentially result in system instability or the disclosure of sensitive information.