CVE-2026-93433

Summary

The flaw in libstoragemgmt allows an attacker to cause a stack buffer overflow by providing malformed SCSI VPD page 0x80 data, leading to potential denial of service.

Exploitability

Exploitation requires control over a local or virtual storage device and knowledge of crafting specific VPD data; it is moderately difficult.

Blast radius

If exploited, the impact is limited to destabilizing the process querying the serial number, potentially causing a denial of service.

Prioritized remediation

Update libstoragemgmt to the latest version to patch the vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.