CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the handling of global buffers during resizing operations in the EROFS filesystem, potentially leading to memory allocation errors and buffer overflows. This flaw could result in system instability or crashes if exploited, making it critical for organizations using Linux systems, particularly those relying on EROFS, to prioritize patching. System administrators and security teams should assess their environments for affected versions and apply updates promptly to mitigate risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers. Retrying the same size then returns -ENOMEM because alloc_pages_bulk() has no pages to add and the unchanged return value is treated as a failure. Retrying an intermediate size allocates a temporary pointer array smaller than gbuf->nrpages and copies more existing pointers than the array can hold. Skip buffers that already satisfy the request. Once all remaining buffers have caught up, advancing z_erofs_gbuf_nrpages again describes the guaranteed minimum size across the pool.