CVE-2026-46329

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-46329
In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts I/O requests beyond the end of the filesystem should be zeroed out, similar to loopback devices and that is what we expect.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/8d582d65d20bb4796db01b19e86909ad68cb337b Patch
https://git.kernel.org/stable/c/bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc Patch
https://git.kernel.org/stable/c/e49abde0ffc382a967b24f326d1614ac3bb06a94 Patch
https://git.kernel.org/stable/c/fe4039034dcdf584afbf763787909e28e92a4927 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Jul 2026, 08:10

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: erofs: manejar el final del sistema de archivos correctamente para montajes respaldados por archivos Las solicitudes de E/S más allá del final del sistema de archivos deben ser rellenadas con ceros, similar a los dispositivos de bucle invertido y eso es lo que esperamos.

08 Jul 2026, 16:15

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/8d582d65d20bb4796db01b19e86909ad68cb337b - () https://git.kernel.org/stable/c/8d582d65d20bb4796db01b19e86909ad68cb337b - Patch
References () https://git.kernel.org/stable/c/bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc - () https://git.kernel.org/stable/c/bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc - Patch
References () https://git.kernel.org/stable/c/e49abde0ffc382a967b24f326d1614ac3bb06a94 - () https://git.kernel.org/stable/c/e49abde0ffc382a967b24f326d1614ac3bb06a94 - Patch
References () https://git.kernel.org/stable/c/fe4039034dcdf584afbf763787909e28e92a4927 - () https://git.kernel.org/stable/c/fe4039034dcdf584afbf763787909e28e92a4927 - Patch

09 Jun 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-06-09 14:16

Updated : 2026-07-23 08:10

NVD link : CVE-2026-46329

Mitre link : CVE-2026-46329

CVE.ORG link : CVE-2026-46329

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo