{"id":17472,"date":"2026-09-05T02:31:09","date_gmt":"2026-09-04T18:31:09","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80892"},"modified":"2026-09-05T02:31:09","modified_gmt":"2026-09-04T18:31:09","slug":"cve-2026-80892","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80892","title":{"rendered":"CVE-2026-80892 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: cap LZMA strea"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>erofs: cap LZMA stream pool size<\/p>\n<p>fs\/erofs\/decompressor_lzma.c sizes the module-global MicroLZMA stream<br \/>\npool from num_possible_cpus() when the lzma_streams module parameter is<br \/>\nunset, then z_erofs_load_lzma_config() preallocates one image-supplied<br \/>\ndictionary per stream, accepting dictionaries up to 8 MiB.  On high-CPU<br \/>\nsystems, a small EROFS image can pin hundreds of MiB of vmalloc-backed<br \/>\ndecoder state until the erofs module is unloaded.<\/p>\n<p>Impact: An EROFS image mounted by the system can pin up to 8 MiB of<br \/>\nvmalloc memory per LZMA stream, either as intended or unexpectedly.<\/p>\n<p>Bound the default stream count by a new<br \/>\nCONFIG_EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS option, default 16, so the<br \/>\nworst-case default preallocation is 128 MiB if the number of CPUs is no<br \/>\nless than 16 while preserving the existing per-image dictionary limit.<br \/>\nAn explicit lzma_streams module parameter is still honoured as-is, so<br \/>\nadministrators who deliberately size the pool are not affected.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>erofs: cap LZMA stream pool size<\/p>\n<p>fs\/erofs\/decompressor_lzma.c sizes the module-global MicroLZMA stream<br \/>\npool from num_possible_cpus<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-17472","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/17472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}