Out-of-Bounds Vulnerability in Linux Kernel EROFS by Linux Foundation

CVE-2026-46078

What is CVE-2026-46078?

A vulnerability exists in the Linux kernel's EROFS file system that involves improper handling of out-of-bounds name offsets for trailing directory entries. While there are existing boundary checks for name offsets, the issue arises when calculated name lengths allow for exploitation. If an attacker crafts a specific EROFS file with a trailing directory entry whose name offset equals or exceeds the maximum size, it can underflow, enabling unauthorized reading beyond the directory block. The condition demands verification of name offsets to ensure they align with the required struct size, thus safeguarding against potential memory corruption vulnerabilities.

References