> CVE-2026-90161

« BACK_TO_HOME
PUBLISHED
2026-09-17 17:17
MODIFIED
2026-09-17 17:17
EPSS (Prob. Exploit)
0.18%
Top 93.5%
DATA SOURCES:
NVD 🔗 2026-09-17 FIRST EPSS 🔗 2026-10-16 OSV 🔗 2026-09-23 MSRC 🔗 2026-09-20

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should be block-aligned, and ztailpacking interlaced pclusters should be invalid at all. Currently, mkfs.erofs won't generate any interlaced pcluster with ztailpacking enabled, so this doesn't affect any existing valid filesystems. However, crafted images can contain invalid interlaced ztailpacking pclusters, resulting in an out-of-bounds read from a kmap'd page and copying irrelevant kernel memory into userspace-visible page cache.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

erofs: fix interlaced ztailpacking pclusters

AFFECTED PACKAGES:
Unknown / Unknown
759 versions affected
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
17/09/2026 17:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 1 month ago

> REFERENCES

https://git.kernel.org/stable/c/451027c642e752420e1a04237db9ce7b35cee595
https://git.kernel.org/stable/c/862427ebb81d1f6abbf74d799790e1694b37b187
https://git.kernel.org/stable/c/ddb7ea4fd99bf6c4314d1dfca18aec6945ce8054
« BACK_TO_HOME