CVE-2026-43179

In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images with metadata compression enabled can trigger incorrect early returns, leading to folio reference leaks. However, this does not cause system crashes or other severe issues.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

12 May 2026, 19:48

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/041b5163bb9b2e81050bcd885b3373bf2f42d5f5 - () https://git.kernel.org/stable/c/041b5163bb9b2e81050bcd885b3373bf2f42d5f5 - Patch
References () https://git.kernel.org/stable/c/56e4a84220045b6af0f1efc11825b39217c7decf - () https://git.kernel.org/stable/c/56e4a84220045b6af0f1efc11825b39217c7decf - Patch
References () https://git.kernel.org/stable/c/643575d5a4f24b23b0c54aa20aa74a4abed8ff5e - () https://git.kernel.org/stable/c/643575d5a4f24b23b0c54aa20aa74a4abed8ff5e - Patch

06 May 2026, 12:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-05-06 12:16

Updated : 2026-05-12 19:48


NVD link : CVE-2026-43179

Mitre link : CVE-2026-43179

CVE.ORG link : CVE-2026-43179


JSON object : View

Products Affected

linux

  • linux_kernel