device-mapper-multipath vulnerabilities
CVEs whose affected-version data names the device-mapper-multipath package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114038Medium· 5.1Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose…
▾ SunlitRed Hat · device-mapper-multipathEPSS 0.12%via CVEORG
CVE-2026-89329Medium· 6.2A flaw was found in `multipathd`
A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the `multipathd` list…
▾ SunlitRed Hat · device-mapper-multipathEPSS 0.16%via NVD