CVE-2026-90434: isofs: release zisofs block pointer buffer head
In the Linux kernel, the following vulnerability has been resolved:
isofs: release zisofs block pointer buffer head
zisofsfillpages() reads the compressed block pointer table. The error paths release the current bufferhead, the loop also releases the old bufferhead when it advances. However, the success path leaves the last bufferhead referenced. Release it before returning success.
Affected Software
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Systems running the Linux kernel and using the ISOFS zisofs code path are relevant. The provided information does not identify affected kernel versions or configurations beyond that path.
What is the impact of triggering the flaw?
The successful zisofs_fill_pages() path leaves the final compressed-block pointer-table buffer_head referenced instead of releasing it. This indicates a buffer_head reference leak when that path is used.
How can I determine whether a fix is available for my kernel?
Check whether your kernel includes one of the referenced stable commits: dbcc7d1b818162aeab2e97fd217d86546d9fde15, ec33e6b7a1de20d7e623b12633191a855445657d, or 0c2c54a7d174edc845f7bae24179fe72a926d10f.