Threats tagged 'ghsa-8cg5-7hqp-6rcp'

CVE-2026-97605 is a vulnerability in the Linux kernel's erofs filesystem related to LZMA decoder handling during pool resize operations. The flaw involves improper management of decoder streams when allocation fails, potentially leaving invalid decoder states unrepaired. The issue is addressed by changing the allocation and freeing sequence to ensure all replacements succeed before advancing the global maximum dictionary size and by recording each stream's dictionary capacity to handle retries correctly.