CVE-2026-53369 Details
Description
In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged() skips CRC verification when descCRCLength + sizeof(struct tag) exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC validation entirely; the descriptor is then accepted based solely on the 8-bit tag checksum, which is trivially recomputable. Reject such descriptors instead of silently accepting them. A legitimate single-block descriptor should never have a CRC length that exceeds the block.
A vulnerability in the Linux kernel's handling of Universal Disk Format (UDF) descriptors has been addressed. The issue arose because the function 'udf_read_tagged()' failed to properly verify the Cyclic Redundancy Check (CRC) when the descriptor's CRC length, plus the size of the tag structure, exceeded the block size. This oversight allowed a maliciously crafted UDF image to bypass CRC validation by setting an oversized CRC length, with the descriptor being accepted based only on a recomputable 8-bit tag checksum. The vulnerability has been fixed by rejecting such descriptors instead of accepting them silently.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for updating the Linux kernel can be found in the official Linux documentation or through the package management system of the respective Linux distribution.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1873eb81c65d3f849418d7386baa39c439c9fc38 | kernel.org | Patch |
| https://git.kernel.org/stable/c/31605bbe94557bff721eaf041001169d44ac6f98 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3dede76d525919bb966f9213e131af685de5ff99 | kernel.org | Patch |
| https://git.kernel.org/stable/c/50dfaf4a027742b4fcdc3e9305e7199ece9bc6a6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/55d41b0a20128e86b9e960dd2e3f0a2d69a18df7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7d1b6adbf90df6c8941090d5646fbeca25ba9770 | kernel.org | Patch |
| https://git.kernel.org/stable/c/832ab4a882dc9b3c0155490d9993642ef545fd22 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fdb26e628d2a211a23815d375bd33bdf863344e2 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.12.1, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.140 >= 6.7, < 6.12.88 >= 6.13, < 6.18.30 >= 6.19, < 7.0.7 2.6.12 - 2.6.12 rc2 2.6.12 rc3 2.6.12 rc4 2.6.12 rc5 7.1 rc1 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 29, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 19, 2026 | New CVE Received | kernel.org |