vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-46329

erofs: handle end of filesystem properly for file-backed mounts

MEDIUM
5.5
CVSS Score
Published: June 9, 2026 at 12:25 PM UTC
Updated: July 23, 2026 at 07:32 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts I/O requests beyond the end of the filesystem should be zeroed out, similar to loopback devices and that is what we expect.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.12 ≤ v < 6.12.756.12 ≤ v < 6.18.146.12 ≤ v < 6.19.46.12 ≤ v < 7.06.13 ≤ v < 6.18.146.19 ≤ v < 6.19.46.12ce63cb62d794c98c7631c2296fa845f2a8d0a4a1
Vendor states this is fixed in 8d582d65d20bb4796db01b19e86909ad68cb337b (fixed)
Vendor states this is fixed in bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc (fixed)
Vendor states this is fixed in e49abde0ffc382a967b24f326d1614ac3bb06a94 (fixed)
Vendor states this is fixed in fe4039034dcdf584afbf763787909e28e92a4927 (fixed)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.14 (unaffected)
Vendor states this is fixed in 6.19.4 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

References (4)

Patch
Source: cverecord
https://git.kernel.org/stable/c/8d582d65d20bb4796db01b19e86909ad68cb337b
Patch
Source: cverecord
https://git.kernel.org/stable/c/e49abde0ffc382a967b24f326d1614ac3bb06a94
Patch
Source: cverecord
https://git.kernel.org/stable/c/fe4039034dcdf584afbf763787909e28e92a4927
Patch
Source: cverecord
https://git.kernel.org/stable/c/bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc

CVSS

5.5MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card