Threats Tagged 'cve-2026-46078'

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen() with unchecked nameoffs. If a crafted EROFS has a trailing dirent with nameoff >= maxsize, maxsize - nameoff can underflow, causing strnlen() to read past the directory block. nameoff0 should also be verified to be a multiple of `sizeof(struct erofs_dirent)` as well [1]. [1] https://sashiko.dev/#/patchset/20260416063511.3173774-1-hsiangkao%40linux.alibaba.com

CVE-2026-46078 is a vulnerability related to the erofs filesystem component, specifically addressing an out-of-bounds handling issue for trailing directory entries (dirents). The vulnerability affects Microsoft products including Azure Linux 3.0. No CVSS score or detailed impact information is provided. There are no known exploits in the wild, and no patch or remediation details are currently available. The vendor advisory references Microsoft Security Response Center but does not provide explicit patch or mitigation instructions.