First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-43154

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix incorrect early exits in volume label handling

Crafted EROFS images containing valid volume labels can trigger incorrect early returns, leading to folio reference leaks.

However, this does not cause system crashes or other severe issues.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Linux	Linux	>= 1cf12c7177410afcb53f815315d1247ea57fae4f, < 8d8a878ef60801d867119b3df6a93e2982d62a71; >= 1cf12c7177410afcb53f815315d1247ea57fae4f, < d498bd168494ad4a4bce16192bfb9ce04ca19c9a; >= 1cf12c7177410afcb53f815315d1247ea57fae4f, < 3afa4da38802a4cba1c23848a32284e7e57b831b
Linux	Linux	6.18

References

Timeline

Published: May 6, 2026
Last modified: Nov 11, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-431555.5In the Linux kernel, the following vulnerability has been resolved: mux: mmio: fix regmap leak on probe failure The mmio regmap that may b CVE-2026-431565.5In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: enable basic endpoint checking pegasus_probe() fill CVE-2026-431575.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx CVE-2026-431588.8In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 CVE-2026-431595.5In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix null dereference in find_network The variable CVE-2026-43165.1Reflected Cross-Site Scripting (XSS) in Gym Management Software IsMyGym by Zuinq Studio affecting the reservation endpoint where the 'ret' p CVE-2026-431605.5In the Linux kernel, the following vulnerability has been resolved: mfd: macsmc: Initialize mutex Initialize struct apple_smc's mutex in a CVE-2026-431615.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without s CVE-2026-431625.5In the Linux kernel, the following vulnerability has been resolved: media: tegra-video: Fix memory leak in __tegra_channel_try_format() Th CVE-2026-431634.7In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Prote CVE-2026-431647.5In the Linux kernel, the following vulnerability has been resolved: udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb(). syzbot re CVE-2026-431655.5In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin When

CVE-2026-43154: Medium severity, CVSS 5.5 | Vulnix