CVE-2026-23388
Squashfs: check metadata block offset is within range
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protection fault in squashfs_copy_data" This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offset. This is subsequently passed to squashfs_copy_data (via squashfs_read_metadata) where the negative offset causes an out of bounds access. The fix is to check that the offset is within range in squashfs_read_metadata. This will trap this and other cases.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Mar 25, 2026 |
| Last Updated | Apr 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
f400e12656ab518be107febfe2315fb1eab5a342 < 0c8ab092aec3ac4294940054772d30b511b16713 f400e12656ab518be107febfe2315fb1eab5a342 < 6b847d65f5b0065e02080c61fad93d57d6686383 f400e12656ab518be107febfe2315fb1eab5a342 < 9e9fa5ad37c9cbad73c165c7ff1e76e650825e7c f400e12656ab518be107febfe2315fb1eab5a342 < 01ee0bcc29864b78249308e8b35042b09bbf5fe3 f400e12656ab518be107febfe2315fb1eab5a342 < 3b9499e7d677dd4366239a292238489a804936b2 f400e12656ab518be107febfe2315fb1eab5a342 < fdb24a820a5832ec4532273282cbd4f22c291a0d
Linux / Linux
2.6.29
References
git.kernel.org: https://git.kernel.org/stable/c/0c8ab092aec3ac4294940054772d30b511b16713 git.kernel.org: https://git.kernel.org/stable/c/6b847d65f5b0065e02080c61fad93d57d6686383 git.kernel.org: https://git.kernel.org/stable/c/9e9fa5ad37c9cbad73c165c7ff1e76e650825e7c git.kernel.org: https://git.kernel.org/stable/c/01ee0bcc29864b78249308e8b35042b09bbf5fe3 git.kernel.org: https://git.kernel.org/stable/c/3b9499e7d677dd4366239a292238489a804936b2 git.kernel.org: https://git.kernel.org/stable/c/fdb24a820a5832ec4532273282cbd4f22c291a0d