CVE-2026-23388
Description
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protection fault in squashfs_copy_data" This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offset. This is subsequently passed to squashfs_copy_data (via squashfs_read_metadata) where the negative offset causes an out of bounds access. The fix is to check that the offset is within range in squashfs_read_metadata. This will trap this and other cases.
How to fix
- linux linux_kernel5.10.253, 5.15.203, 6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7 or later
- git.kernel.org/stable/c/01ee0bcc29864b78249308e8b35042b09bbf5fe3
- git.kernel.org/stable/c/0c8ab092aec3ac4294940054772d30b511b16713
- git.kernel.org/stable/c/3b9499e7d677dd4366239a292238489a804936b2
- git.kernel.org/stable/c/3f68a9457a6190814377577374da75f872e0a013
- git.kernel.org/stable/c/60f679f643f3f36a8571ea585e4ce5d93ef952b5
- git.kernel.org/stable/c/6b847d65f5b0065e02080c61fad93d57d6686383
- git.kernel.org/stable/c/9e9fa5ad37c9cbad73c165c7ff1e76e650825e7c
- git.kernel.org/stable/c/fdb24a820a5832ec4532273282cbd4f22c291a0d
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 2.6.29.1 ≤ v < 5.10.253, 5.11 ≤ v < 5.15.203, 5.16 ≤ v < 6.1.167, 6.2 ≤ v < 6.6.130, 6.7 ≤ v < 6.12.77, 6.13 ≤ v < 6.18.17, 6.19 ≤ v < 6.19.7, 2.6.29, 7.0 | 5.10.253, 5.15.203, 6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.