7.1

CVE-2026-90161

erofs: fix interlaced ztailpacking pclusters

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix interlaced ztailpacking pclusters

On-disk sizes of interlaced pclusters should be block-aligned, and
ztailpacking interlaced pclusters should be invalid at all.

Currently, mkfs.erofs won't generate any interlaced pcluster with
ztailpacking enabled, so this doesn't affect any existing valid
filesystems.

However, crafted images can contain invalid interlaced ztailpacking
pclusters, resulting in an out-of-bounds read from a kmap'd page and
copying irrelevant kernel memory into userspace-visible page cache.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version fdffc091e6f94602558bba712b51bc16f79fd6d5
Version < ddb7ea4fd99bf6c4314d1dfca18aec6945ce8054
Status affected
Version fdffc091e6f94602558bba712b51bc16f79fd6d5
Version < 451027c642e752420e1a04237db9ce7b35cee595
Status affected
Version fdffc091e6f94602558bba712b51bc16f79fd6d5
Version < 862427ebb81d1f6abbf74d799790e1694b37b187
Status affected
Version 7d6ef8277e44c22f894d54d26ddb36c22d60712d
Status affected
Version 6.0.16
Version < 6.1
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.1
Status affected
Version 0
Version < 6.1
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ddb7ea4fd99bf6c4314d1dfca18aec6945ce8054
https://git.kernel.org/stable/c/451027c642e752420e1a04237db9ce7b35cee595
https://git.kernel.org/stable/c/862427ebb81d1f6abbf74d799790e1694b37b187