CVE-2026-53369: udf: reject descriptors with oversized CRC length
In the Linux kernel, the following vulnerability has been resolved:
udf: reject descriptors with oversized CRC length
udfreadtagged() skips CRC verification when descCRCLength + sizeof(struct tag) exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC validation entirely; the descriptor is then accepted based solely on the 8-bit tag checksum, which is trivially recomputable.
Reject such descriptors instead of silently accepting them. A legitimate single-block descriptor should never have a CRC length that exceeds the block.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the risk rating of CVE-2026-53369?
The risk rating of CVE-2026-53369 is 47.
How can CVE-2026-53369 affect my system?
CVE-2026-53369 can allow a crafted UDF image to bypass CRC verification, leading to potential data integrity issues.
What should I do to mitigate CVE-2026-53369?
To mitigate CVE-2026-53369, ensure you update the Linux kernel to a version that includes the fix for this vulnerability.
Is CVE-2026-53369 active in all Linux kernel versions?
CVE-2026-53369 affects specific versions of the Linux kernel, and users should verify their kernel version against the published security updates.
What components of the Linux kernel are affected by CVE-2026-53369?
CVE-2026-53369 specifically affects the UDF (Universal Disk Format) handling in the Linux kernel.