Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43179

erofs: fix incorrect early exits for invalid metabox-enabled images

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images with metadata compression enabled can trigger incorrect early returns, leading to folio reference leaks. However, this does not cause system crashes or other severe issues.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 414091322c6363c9283aeb177101e4d7a3819ccd to < 041b5163bb9b2e81050bcd885b3373bf2f42d5f5affected
  • 414091322c6363c9283aeb177101e4d7a3819ccd to < 56e4a84220045b6af0f1efc11825b39217c7decfaffected
  • 414091322c6363c9283aeb177101e4d7a3819ccd to < 643575d5a4f24b23b0c54aa20aa74a4abed8ff5eaffected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References