debian/lvm2 vulnerabilities

Latest debian/lvm2 CVEs

Newest publication first

1. CVE-2026-19617 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

   Published 2026-08-14

   Medium·CVSS 5.5 EPSS 0.16%

   A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM comman...

2. DSA-2095-1 lvm2 - denial of service

   Published 2010-08-23

   Unknown

3. CVE-2010-2526 The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a sock...

   Published 2010-08-04

   Medium·CVSS 4.6 EPSS 0.51%

   The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.