CVE-2026-43209: minix: Add required sanity checking to minix_check_superblock()
In the Linux kernel, the following vulnerability has been resolved:
minix: Add required sanity checking to minixchecksuperblock()
The fs/minix implementation of the minix filesystem does not currently support any other value for slogzonesize than 0. This is also the only value supported in util-linux; see mkfs.minix.c line 511. In addition, this patch adds some sanity checking for the other minix superblock fields, and moves the minixblocksneeded() checks for the zmap and imap also to minixchecksuperblock().
This also closes a related syzbot bug report.
Affected Software
Remediation
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
The issue affects Linux kernel systems using the minix filesystem implementation. The CVSS vector indicates local access is required, so it is not described as remotely exploitable.
What access does an attacker need, and what is the likely impact?
An attacker needs low privileges locally and does not require user interaction. The reported impact is high availability impact, with no reported confidentiality or integrity impact.
What should be done if this applies to a system?
Apply an available patch. The provided information does not list affected kernel versions or a version-based detection method.