CVE-2026-90161 | BDVDB-2026-375941 Detail
LinuxLinux
Description#
In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should be block-aligned, and ztailpacking interlaced pclusters should be invalid at all. Currently, mkfs.erofs won't generate any interlaced pcluster with ztailpacking enabled, so this doesn't affect any existing valid filesystems. However, crafted images can contain invalid interlaced ztailpacking pclusters, resulting in an out-of-bounds read from a kmap'd page and copying irrelevant kernel memory into userspace-visible page cache.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact high. Attack vector: local.
Weaknesses#
No weakness recorded in the source data.
References#
- https://git.kernel.org/stable/c/b634286a8628155557a4f473a9dbab18bb439a7b
- https://git.kernel.org/stable/c/795dca34a41545d377d19bc492b10bc789772410
- https://git.kernel.org/stable/c/cd59f91cbc1e715cb5dc65773ee22123d70cb8f2
- https://git.kernel.org/stable/c/ddb7ea4fd99bf6c4314d1dfca18aec6945ce8054
- https://git.kernel.org/stable/c/451027c642e752420e1a04237db9ce7b35cee595
- https://git.kernel.org/stable/c/862427ebb81d1f6abbf74d799790e1694b37b187
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.