A vulnerability, which was classified as critical, has been found in npitre cramfs-tools up to 2.2. Affected is the function
change_file_status of the file cramfsck.c. Performing a manipulation results in symlink following.
This vulnerability is reported as CVE-2026-8784. The attack requires a local approach. Moreover, an exploit is present.
It is recommended to apply a patch to fix this issue.
