CVE-2026-80892 | Linux Kernel up to 7.1.7 erofs decompressor_lzma.c z_erofs_load_lzma_config allocation of resources

September 4, 2026 Yanac

A vulnerability was found in Linux Kernel up to 6.1.183/6.6.150/6.12.102/6.18.43/7.1.7 and classified as problematic. This affects the function z_erofs_load_lzma_config of the file fs/erofs/decompressor_lzma.c of the component erofs. Executing a manipulation can lead to allocation of resources.

This vulnerability appears as CVE-2026-80892. The attack requires local access. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More