CVE-2026-46078

HIGH EPSS 3.1%
Published May 27, 20261mo ago · Modified Jun 19, 20261w ago
7.1 CVSS 3.1
High
Find Similar
Published May 27, 2026 1mo ago
Last Modified Jun 19, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen() with unchecked nameoffs. If a crafted EROFS has a trailing dirent with nameoff >= maxsize, maxsize - nameoff can underflow, causing strnlen() to read past the directory block. nameoff0 should also be verified to be a multiple of `sizeof(struct erofs_dirent)` as well [1]. [1] https://sashiko.dev/#/patchset/20260416063511.3173774-1-hsiangkao%40linux.alibaba.com

CVSS Details

Base Score
7.1
Exploitability
1.8
Impact
5.2
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
3.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

References 8

  • git.kernel.org https://git.kernel.org/stable/c/1d55445226c75ddd4e78b09b3e7d99109b28c366
  • git.kernel.org https://git.kernel.org/stable/c/222055e6b4063abd2d9e13c3d49bbd1724c50789
  • git.kernel.org https://git.kernel.org/stable/c/48b27a955d22391c7f30169fa7b6b2e1977f1ce4
  • git.kernel.org https://git.kernel.org/stable/c/80a23c6d1aba35be8746d74ac14e6ba5ae46da21
  • git.kernel.org https://git.kernel.org/stable/c/8ebb951a284b7446e025afc7dc5e9516ef9a7214
  • git.kernel.org https://git.kernel.org/stable/c/a8ee527807f7d97e55ce2ef2906f7f34975eb1c7
  • git.kernel.org https://git.kernel.org/stable/c/aa16dca1b062355181ef215229eeac249d7c0d61
  • git.kernel.org https://git.kernel.org/stable/c/d18a3b5d337fa412a38e776e6b4b857a58836575

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.