CVE-2026-43179

In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images with metadata compression enabled can trigger incorrect early returns, leading to folio reference leaks. However, this does not cause system crashes or other severe issues.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/041b5163bb9b2e81050bcd885b3373bf2f42d5f5	Patch
https://git.kernel.org/stable/c/56e4a84220045b6af0f1efc11825b39217c7decf	Patch
https://git.kernel.org/stable/c/643575d5a4f24b23b0c54aa20aa74a4abed8ff5e	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

11 Nov 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: erofs: soluciona salidas tempranas incorrectas para imágenes con metabox habilitado no válidas Imágenes EROFS manipuladas con compresión de metadatos habilitada pueden desencadenar retornos tempranos incorrectos, lo que lleva a fugas de referencias de folio. Sin embargo, esto no causa bloqueos del sistema u otros problemas graves.

Information

Published : 2026-05-06 12:16

Updated : 2026-11-11 20:10

NVD link : CVE-2026-43179

Mitre link : CVE-2026-43179

CVE.ORG link : CVE-2026-43179

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-43179", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "414091322c6363c9283aeb177101e4d7a3819ccd", "lessThan": "041b5163bb9b2e81050bcd885b3373bf2f42d5f5", "versionType": "git"}, {"status": "affected", "version": "414091322c6363c9283aeb177101e4d7a3819ccd", "lessThan": "56e4a84220045b6af0f1efc11825b39217c7decf", "versionType": "git"}, {"status": "affected", "version": "414091322c6363c9283aeb177101e4d7a3819ccd", "lessThan": "643575d5a4f24b23b0c54aa20aa74a4abed8ff5e", "versionType": "git"}], "programFiles": ["fs/erofs/super.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.17"}, {"status": "unaffected", "version": "0", "lessThan": "6.17", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/erofs/super.c"], "defaultStatus": "affected"}]}], "published": "2026-05-06T12:16:36.417", "references": [{"url": "https://git.kernel.org/stable/c/041b5163bb9b2e81050bcd885b3373bf2f42d5f5", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/56e4a84220045b6af0f1efc11825b39217c7decf", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/643575d5a4f24b23b0c54aa20aa74a4abed8ff5e", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix incorrect early exits for invalid metabox-enabled images\n\nCrafted EROFS images with metadata compression enabled can trigger\nincorrect early returns, leading to folio reference leaks.\n\nHowever, this does not cause system crashes or other severe issues."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nerofs: soluciona salidas tempranas incorrectas para im\u00e1genes con metabox habilitado no v\u00e1lidas\n\nIm\u00e1genes EROFS manipuladas con compresi\u00f3n de metadatos habilitada pueden desencadenar retornos tempranos incorrectos, lo que lleva a fugas de referencias de folio.\n\nSin embargo, esto no causa bloqueos del sistema u otros problemas graves."}], "lastModified": "2026-11-11T20:10:00.273", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "742E05BA-773A-4EF3-822F-A4A7DED31A65", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.17"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}