CVE-2026-43166
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
erofs: fix interlaced plain identification for encoded extents<br />
<br />
Only plain data whose start position and on-disk physical length are<br />
both aligned to the block size should be classified as interlaced<br />
plain extents. Otherwise, it must be treated as shifted plain extents.<br />
<br />
This issue was found by syzbot using a crafted compressed image<br />
containing plain extents with unaligned physical lengths, which can<br />
cause OOB read in z_erofs_transform_plain().



