CVE-2026-45943

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix inline data read failure for ztailpacking pclusters

Compressed folios for ztailpacking pclusters must be valid before adding

these pclusters to I/O chains. Otherwise, z_erofs_decompress_pcluster()

may assume they are already valid and then trigger a NULL pointer

dereference.

It is somewhat hard to reproduce because the inline data is in the same

block as the tail of the compressed indexes, which are usually read just

before. However, it may still happen if a fatal signal arrives while

read_mapping_folio() is running, as shown below:

erofs: (device dm-1): z_erofs_pcluster_begin: failed to get inline data -4

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008

...

pc : z_erofs_decompress_queue+0x4c8/0xa14

lr : z_erofs_decompress_queue+0x160/0xa14

sp : ffffffc08b3eb3a0

x29: ffffffc08b3eb570 x28: ffffffc08b3eb418 x27: 0000000000001000

x26: ffffff8086ebdbb8 x25: fffff

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References