CVE-2026-43179

erofs: fix incorrect early exits for invalid metabox-enabled images

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix incorrect early exits for invalid metabox-enabled images

Crafted EROFS images with metadata compression enabled can trigger

incorrect early returns, leading to folio reference leaks.

However, this does not cause system crashes or other severe issues.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    erofs: fix incorrect early exits for invalid metabox-enabled images
    cvelistv5