Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23238

In the Linux kernel, the following vulnerability has been resolved: romfs: check sb_set_blocksize() return value romfs_fill_super() ignores the return value of sb_set_blocksize(), which can fail if the requested block size is incompatible with the block device's configuration. This can be triggered by setting a loop device's block size larger than PAGE_SIZE using ioctl(LOOP_SET_BLOCK_SIZE, 32768), then mounting a romfs filesystem on that device. When sb_set_blocksize(sb, ROMBSIZE) is called
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1f57d75696b52ff2ddb52f458cfd3da49b94b132dbfa8ca7edb210957b7fa33b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 3 assertions

{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V4.0","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/adp/0/affected/0

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/romfs/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a381f0f61b35c8894b0bd0d6acef2d8f9b08b244","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"f2521ab1f63a8c244f06a080319e5ff9a2e1bd95","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"2c5829cd8fbbc91568c520b666898f57cdcb8cf6","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/romfs/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.251","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.201","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.164","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/affected/1

Affected products and versions

3 source assertions
{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V4.0","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/adp/0/affected/0
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/romfs/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a381f0f61b35c8894b0bd0d6acef2d8f9b08b244","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"f2521ab1f63a8c244f06a080319e5ff9a2e1bd95","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"2c5829cd8fbbc91568c520b666898f57cdcb8cf6","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/romfs/super.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.251","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.201","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.164","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/adp/0/references/0
{"url":"https://git.kernel.org/stable/c/2c5829cd8fbbc91568c520b666898f57cdcb8cf6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/4b71ad7676564a94ec5f7d18298f51e8ae53db73"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/9b203b8ddd7359270e8a694d0584743555128e2c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a381f0f61b35c8894b0bd0d6acef2d8f9b08b244"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ab7ad7abb3660c58ffffdf07ff3bb976e7e0afa0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/cbd9931e6456822067725354d83446c5bb813030"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/f2521ab1f63a8c244f06a080319e5ff9a2e1bd95"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4b09f232dd2c0d7363f891c3f656ae79d0cb99735e35f95f613b8325b383d6cc · sha256:37688b493efe5279… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer