CVE-2026-45999

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description An unsigned underflow exists in the z erofs lz4 handle overlap() function within the erofs component. Specifically, crafted images containing illegal extents where !partial decoding is true and m llen is less than m plen can trigger the LZ4 inplace decompression path. This path fails to properly handle cases where outpages is less than inpages, causing the calculation outpages - inpages to wrap to a large value. Consequently, the rq->out[] access reads beyond the boundaries of the decompressed pages array.

Recommendations Update the Linux kernel to version 7.0.11-1.1 or later.