CVE-2026-43166
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/05/2026
Última modificación:
06/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
erofs: fix interlaced plain identification for encoded extents<br />
<br />
Only plain data whose start position and on-disk physical length are<br />
both aligned to the block size should be classified as interlaced<br />
plain extents. Otherwise, it must be treated as shifted plain extents.<br />
<br />
This issue was found by syzbot using a crafted compressed image<br />
containing plain extents with unaligned physical lengths, which can<br />
cause OOB read in z_erofs_transform_plain().



