What is the CVSS score of CVE-2026-43166?

CVE-2026-43166 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Linux Kernel EROFS are affected by CVE-2026-43166?

CVE-2026-43166 is a high-severity out-of-bounds read vulnerability in the Linux kernel EROFS filesystem that allows local users to read sensitive kernel memory and trigger system crashes through…. A patch is available.

Linux Kernel EROFS CVE-2026-43166

EUVD-2026-27729 HIGH

Out-of-bounds Write (CWE-787)

2026-05-06 Linux

GHSA-78rx-cxmq-q7qg

Buffer Overflow Linux Memory Corruption

7.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

May 08, 2026 - 13:32 vuln.today

CVSS changed

May 08, 2026 - 13:22 NVD

7.1 (HIGH)

Patch available

May 06, 2026 - 13:32 EUVD

CVE Published

May 06, 2026 - 11:27 nvd

HIGH 7.1

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix interlaced plain identification for encoded extents

Only plain data whose start position and on-disk physical length are both aligned to the block size should be classified as interlaced plain extents. Otherwise, it must be treated as shifted plain extents.

This issue was found by syzbot using a crafted compressed image containing plain extents with unaligned physical lengths, which can cause OOB read in z_erofs_transform_plain().

AnalysisAI

Out-of-bounds read in Linux kernel EROFS filesystem allows local attackers with user interaction to read kernel memory and cause denial of service via crafted compressed images. The vulnerability stems from incorrect classification of unaligned plain extents, triggering OOB access in z_erofs_transform_plain(). …

RemediationAI

Within 24 hours: inventory all Linux systems running EROFS filesystem and document current kernel versions. Within 7 days: apply vendor-released patches to affected systems-kernel 6.15+, 6.18.16+, 6.19.6+, or 7.0+ depending on your stable branch; prioritize systems that mount untrusted or user-supplied EROFS images. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

More from same product – last 7 days

CVE-2026-47334 MEDIUM This Month

5.5 May 28

Kernel availability loss in Ubuntu Linux 6.8, 6.17, and 7.0 can be triggered by any unprivileged local user via a defect

CVE-2026-47335 MEDIUM This Month

5.5 May 28

Kernel panic via NULL pointer dereference in Ubuntu Linux 6.8's AppArmor notification handler allows a locally authentic

CVE-2026-47327 LOW Monitor

3.3 May 28

NULL pointer dereference in Ubuntu Linux kernel versions 6.8, 6.17, and 7.0 allows a local unprivileged user to crash th

CVE-2026-47337 LOW Monitor

3.3 May 28

NULL pointer dereference in Ubuntu Linux kernel SAUCE patches (versions 6.8, 6.17, and 7.0) allows an unprivileged local

CVE-2026-45844 Monitor

May 27

In the Linux kernel, the following vulnerability has been resolved: netfilter: arp_tables: fix IEEE1394 ARP payload par

Vendor StatusVendor

CVE-2026-43166 vulnerability details – vuln.today

Back