Resource Management Issue in Linux Kernel's EROFS Module

CVE-2026-80892

What is CVE-2026-80892?

A vulnerability in the Linux kernel's EROFS module alters memory allocation, causing potential excessive resource usage on high-CPU systems. When the module parameter for MicroLZMA stream pool size is unset, each EROFS image can preallocate significant vmalloc memory, potentially leading to inefficient resource management. The recent updates establish a new configuration option to limit the number of streams, allowing administrators to tailor memory usage while maintaining existing limits on dictionary sizes.

References