Linux Kernel Vulnerability in ERoFS Impacting Kernel Performance

CVE-2026-80697

What is CVE-2026-80697?

A vulnerability in the Linux kernel's ERoFS component can lead to a critical null pointer dereference due to improper handling of file paths during page cache sharing. Specifically, the backing files for page cache were previously initialized with an invalid f_path, which can cause a crash when specific conditions are met. This issue was traced back to interactions with a recent mincore fix, leading to crashes in kernel mode. The resolution involves ensuring that valid paths are specified using proper disconnected dentries, thus allowing for better stability in memory handling and cache sharing processes.

References