CVE-2026-43179 PUBLISHED

erofs: fix incorrect early exits for invalid metabox-enabled images

Assigner: Linux
Reserved: 01.05.2026 Published: 06.05.2026 Updated: 06.05.2026

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix incorrect early exits for invalid metabox-enabled images

Crafted EROFS images with metadata compression enabled can trigger incorrect early returns, leading to folio reference leaks.

However, this does not cause system crashes or other severe issues.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 414091322c6363c9283aeb177101e4d7a3819ccd to 041b5163bb9b2e81050bcd885b3373bf2f42d5f5 (excl.)
  • affected from 414091322c6363c9283aeb177101e4d7a3819ccd to 56e4a84220045b6af0f1efc11825b39217c7decf (excl.)
  • affected from 414091322c6363c9283aeb177101e4d7a3819ccd to 643575d5a4f24b23b0c54aa20aa74a4abed8ff5e (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.17 is affected
  • unaffected from 0 to 6.17 (excl.)
  • unaffected from 6.18.16 to 6.18.* (incl.)
  • unaffected from 6.19.6 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References