CVE-2026-80892

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the Linux kernel, the fs/erofs/decompressor lzma.c file determines the size of the module-global MicroLZMA stream pool based on num possible cpus() when the lzma streams module parameter is not set. The z erofs load lzma config() function then preallocates one image-supplied dictionary per stream, with dictionaries reaching up to 8 MiB. On systems with a high number of CPUs, a small EROFS image can pin hundreds of MiB of vmalloc-backed decoder state until the erofs module is unloaded, potentially leading to memory exhaustion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.