Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted (deliberately corrupted) images.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7c35de4df1056a5a1fb4de042197b8f5b1033b61 before 4d0e0bb1908acac5b27d30b45c450e8ead97eb00; affected 7c35de4df1056a5a1fb4de042197b8f5b1033b61 before 1f86d73a0afe43b6a85d2aa8207853350b7e2111; affected 7c35de4df1056a5a1fb4de042197b8f5b1033b61 before f2a12cc3b97f062186568a7b94ddb7aa2ef68140 |
| Linux / Linux | affected 6.10; unaffected 0 before 6.10; unaffected 6.12.59 through 6.12.*; unaffected 6.17.9 through 6.17.*; unaffected 6.18 through * |
CWE
No CWE identifiers supplied.