CVE-2026-23388: Squashfs: check metadata block offset is within range
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check metadata block offset is within range
Syzkaller reports a "general protection fault in squashfscopydata"
This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offset.
This is subsequently passed to squashfscopydata (via squashfsreadmetadata) where the negative offset causes an out of bounds access.
The fix is to check that the offset is within range in squashfsreadmetadata. This will trap this and other cases.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.130.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23388?
CVE-2026-23388 is classified as a high severity vulnerability due to its potential to cause a general protection fault in the Linux kernel.
How do I fix CVE-2026-23388?
To fix CVE-2026-23388, ensure that you update your Linux kernel version to the latest patched release that addresses this vulnerability.
What systems are affected by CVE-2026-23388?
CVE-2026-23388 affects systems using the Squashfs filesystem in the Linux kernel.
What are the risks associated with CVE-2026-23388?
The risks associated with CVE-2026-23388 include potential system crashes and data corruption due to a corrupted metadata block.
Who reported CVE-2026-23388?
CVE-2026-23388 was reported by Syzkaller, a testing tool for finding bugs in the kernel.