CVE-2026-43179
kernel: erofs: fix incorrect early exits for invalid metabox-enabled images
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 6, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's EROFS filesystem. An attacker could provide a specially crafted EROFS image with metadata compression enabled. This could trigger incorrect early returns within the kernel, leading to folio reference leaks. While this issue does not cause system crashes or other severe problems, it can result in a resource leak.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count