CVE-2026-23224: erofs: fix UAF issue for file-backed mounts w/ directio option
erofs: fix UAF issue for file-backed mounts w/ directio option
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In struct erofs_fileio_rq, introduce a reference count initialized to two; have both erofs_fileio_ki_complete() and erofs_fileio_rq_submit() decrement it, and free rq only when the decrement reduces the count to zero.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23224?
CVE-2026-23224 has been classified as a medium severity vulnerability in the Linux kernel.
What is the impact of CVE-2026-23224?
CVE-2026-23224 can lead to a use-after-free (UAF) condition which may permit unauthorized access to sensitive information.
How do I fix CVE-2026-23224?
To mitigate CVE-2026-23224, update your Linux kernel to the latest version where the vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2026-23224?
CVE-2026-23224 affects multiple versions of the Linux kernel that support file-backed mounts with the directio option.
Is CVE-2026-23224 exploitable remotely?
CVE-2026-23224 could potentially be exploited locally, affecting users who have direct access to the vulnerable system.