Riskcovery

CVE-2026-43179

erofs: fix incorrect early exits for invalid metabox-enabled images

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix incorrect early exits for invalid metabox-enabled images

Crafted EROFS images with metadata compression enabled can trigger incorrect early returns, leading to folio reference leaks.

However, this does not cause system crashes or other severe issues.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 414091322c6363c9283aeb177101e4d7a3819ccd to before 041b5163bb9b2e81050bcd885b3373bf2f42d5f5Affected
  • 414091322c6363c9283aeb177101e4d7a3819ccd to before 56e4a84220045b6af0f1efc11825b39217c7decfAffected
  • 414091322c6363c9283aeb177101e4d7a3819ccd to before 643575d5a4f24b23b0c54aa20aa74a4abed8ff5eAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.