CVE-2025-39924

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix invalid algorithm for encoded extents

The current algorithm sanity checks do not properly apply to new encoded extents.

Unify the algorithm check with Z_EROFS_COMPRESSION(_RUNTIME)_MAX and ensure consistency with sbi->available_compr_algs.

This vulnerability does not affect supported Red Hat Enterprise Linux releases because the vulnerable code is not present in Red Hat kernels. The flaw stems from improper sanity checks on compression algorithms for newly encoded extents within the EROFS filesystem driver, which could lead to unexpected behavior or denial of service upon mounting a crafted filesystem image. Because the affected code was introduced in later upstream Linux kernel versions, Red Hat products are not exposed to this risk.