CVE detail
CVE-2026-52992
In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfs_validate_bblk() Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When nzones is 0, adfs_read_map() passes it to kmalloc_array(0, ...) which returns ZERO_SIZE_PTR, and adfs_map_layout() then writes to dm[-1], causing an out-of-bounds write before the allocated buffer. adfs_validate_dr0() already rejects nzones != 1 for old-format images. Add the equivalent check to adfs_validate_bblk() for new-format images so that a crafted image with nzones == 0 is rejected at probe time. Found by syzkaller.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 23.0 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
9 source links · newest first
Information published.
vendormsrc.microsoft.comJul 3, 2026, 8:01 AMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Patchgit.kernel.orgJun 24, 2026, 5:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-14063CVSS 5.7 · Medium
Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via malicious net…
- CVE-2026-13873CVSS 6.5 · Medium
Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML p…
- CVE-2026-53246CVSS 9.8 · Critical
In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing When a listening SCTP server processes…
- CVE-2026-53209CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend Existing advertising instances can alrea…
- CVE-2026-53205CVSS 7.1 · High
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds checks for firmware log indices Add validation that read and write indices in the firm…
- CVE-2026-53203CVSS 7.1 · High
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from th…