-

CVE-2026-98005

erofs: delimit inode_share cache key components

In the Linux kernel, the following vulnerability has been resolved:

erofs: delimit inode_share cache key components

Previously, inode_share keys were encoded as follows:

  fingerprint || domain_id

It would be better to have a separator between the fingerprint and domain
ID so that the fingerprint won't be parsed as part of a domain ID.

Change the key encoding as follows:

  domain_id || '\0' || fingerprint

Since domain_id is a NUL-terminated string, this makes the in-memory key
indices unambiguous.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e0bf7d1c074dc4252223ae897560345ccc24100d
Version < 16322a67336cfeea0af4b05206ef8d0e0eda55bb
Status affected
Version e0bf7d1c074dc4252223ae897560345ccc24100d
Version < 96bf9831fbf423b8104f7948cd8fe7007ecfb46c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.0
Status affected
Version 0
Version < 7.0
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.04
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/16322a67336cfeea0af4b05206ef8d0e0eda55bb
https://git.kernel.org/stable/c/96bf9831fbf423b8104f7948cd8fe7007ecfb46c