https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T15:07:55.616347+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-50746 CVE-2022-50746 — erofs: validate the extent length for uncompressed pclusters 2026-09-29T15:07:55.664790+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

erofs: validate the extent length for uncompressed pclusters

syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2

The referenced fuzzed image actually has two issues: - m_pa == 0 as a non-inlined pcluster; - The logical length is longer than its physical length.

The first issue has already been addressed. This patch addresses the second issue by checking the extent length validity.