CVE-2026-43154

In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits in volume label handling Crafted EROFS images containing valid volume labels can trigger incorrect early returns, leading to folio reference leaks. However, this does not cause system crashes or other severe issues.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/3afa4da38802a4cba1c23848a32284e7e57b831b	Patch
https://git.kernel.org/stable/c/8d8a878ef60801d867119b3df6a93e2982d62a71	Patch
https://git.kernel.org/stable/c/d498bd168494ad4a4bce16192bfb9ce04ca19c9a	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

11 Nov 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: erofs: corrección de salidas tempranas incorrectas en el manejo de etiquetas de volumen Imágenes EROFS manipuladas que contienen etiquetas de volumen válidas pueden desencadenar retornos tempranos incorrectos, lo que lleva a fugas de referencias de folio. Sin embargo, esto no causa bloqueos del sistema u otros problemas graves.

Information

Published : 2026-05-06 12:16

Updated : 2026-11-11 21:10

NVD link : CVE-2026-43154

Mitre link : CVE-2026-43154

CVE.ORG link : CVE-2026-43154

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-43154", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1cf12c7177410afcb53f815315d1247ea57fae4f", "lessThan": "8d8a878ef60801d867119b3df6a93e2982d62a71", "versionType": "git"}, {"status": "affected", "version": "1cf12c7177410afcb53f815315d1247ea57fae4f", "lessThan": "d498bd168494ad4a4bce16192bfb9ce04ca19c9a", "versionType": "git"}, {"status": "affected", "version": "1cf12c7177410afcb53f815315d1247ea57fae4f", "lessThan": "3afa4da38802a4cba1c23848a32284e7e57b831b", "versionType": "git"}], "programFiles": ["fs/erofs/super.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.18"}, {"status": "unaffected", "version": "0", "lessThan": "6.18", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/erofs/super.c"], "defaultStatus": "affected"}]}], "published": "2026-05-06T12:16:33.193", "references": [{"url": "https://git.kernel.org/stable/c/3afa4da38802a4cba1c23848a32284e7e57b831b", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8d8a878ef60801d867119b3df6a93e2982d62a71", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d498bd168494ad4a4bce16192bfb9ce04ca19c9a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix incorrect early exits in volume label handling\n\nCrafted EROFS images containing valid volume labels can trigger\nincorrect early returns, leading to folio reference leaks.\n\nHowever, this does not cause system crashes or other severe issues."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nerofs: correcci\u00f3n de salidas tempranas incorrectas en el manejo de etiquetas de volumen\n\nIm\u00e1genes EROFS manipuladas que contienen etiquetas de volumen v\u00e1lidas pueden desencadenar retornos tempranos incorrectos, lo que lleva a fugas de referencias de folio.\n\nSin embargo, esto no causa bloqueos del sistema u otros problemas graves."}], "lastModified": "2026-11-11T21:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0D300DB-AA68-4962-981D-EF9F5E97AACF", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}