CVE-2026-43166

erofs: fix interlaced plain identification for encoded extents

High · published May 6, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix interlaced plain identification for encoded extents

Only plain data whose start position and on-disk physical length are

both aligned to the block size should be classified as interlaced

plain extents. Otherwise, it must be treated as shifted plain extents.

This issue was found by syzbot using a crafted compressed image

containing plain extents with unaligned physical lengths, which can

cause OOB read in z_erofs_transform_plain().

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.6th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    erofs: fix interlaced plain identification for encoded extents
    cvelistv5