Linux Kernel Ztailpacking Feature Buffer Copy Overflow Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's implementation of the ztailpacking feature within the erofs filesystem. This vulnerability arises because the tail pcluster may not represent a complete filesystem block when ztailpacking is applied, leading to a buffer copy overflow. The issue was highlighted by a Kernel Address Sanitizer (KASAN) report, which indicated that the vulnerability could be exploited during the decompression of data, potentially causing memory corruption.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, which can commonly result in memory corruption and the potential execution of arbitrary code.