CVE-2026-43179

5.5 mediumEPSS 0.1%

Medium (5.5) in linux linux kernel. EPSS 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images with metadata compression enabled can trigger incorrect early returns, leading to folio reference leaks. However, this does not cause system crashes or other severe issues.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
Published: 2026-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

https://git.kernel.org/stable/c/041b5163bb9b2e81050bcd885b3373bf2f42d5f5
https://git.kernel.org/stable/c/56e4a84220045b6af0f1efc11825b39217c7decf
https://git.kernel.org/stable/c/643575d5a4f24b23b0c54aa20aa74a4abed8ff5e

Check your stack JSON