CVE-2026-89602

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the erofs component during the resizing of global buffers. The variable z erofs gbuf nrpages is only advanced after all global buffers have been grown. If a resize operation fails after some buffers have already been enlarged, a subsequent retry revisits those enlarged buffers. If the same size is retried, the system returns -ENOMEM because the alloc pages bulk() function has no pages to add. If an intermediate size is retried, a temporary pointer array is allocated that is smaller than gbuf->nrpages, leading to a condition where more existing pointers are copied than the array can hold.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.