Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23388

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protection fault in squashfs_copy_data" This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offset. This is subsequently passed to squashfs_copy_data (via squashfs_read_metadata) where the negative offset causes an out of bounds access. The fix is to check that the offset is within range in s
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:05b359e11ba6bf107f5921607d34a650c755ddc2a0091937a13d449cca906392
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/squashfs/cache.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.29"},{"lessThan":"2.6.29","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/squashfs/cache.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"60f679f643f3f36a8571ea585e4ce5d93ef952b5","status":"affected","version":"f400e12656ab518be107febfe2315fb1eab5a342","versionType":"git"},{"lessThan":"3f68a9457a6190814377577374da75f872e0a013","status":"affected","version":"f400e12656ab518be107febfe2315fb1eab5a342","versionType":"git"},{"lessThan":"0c8ab092aec3ac4294940054772d30b511b16713","status":"affected","version":"f400e12656ab518be107febfe2…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/squashfs/cache.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.29"},{"lessThan":"2.6.29","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/squashfs/cache.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"60f679f643f3f36a8571ea585e4ce5d93ef952b5","status":"affected","version":"f400e12656ab518be107febfe2315fb1eab5a342","versionType":"git"},{"lessThan":"3f68a9457a6190814377577374da75f872e0a013","status":"affected","version":"f400e12656ab518be107febfe2315fb1eab5a342","versionType":"git"},{"lessThan":"0c8ab092aec3ac4294940054772d30b511b16713","status":"affected","version":"f400e12656ab518be107febfe2…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/01ee0bcc29864b78249308e8b35042b09bbf5fe3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/0c8ab092aec3ac4294940054772d30b511b16713"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/3b9499e7d677dd4366239a292238489a804936b2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/3f68a9457a6190814377577374da75f872e0a013"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/60f679f643f3f36a8571ea585e4ce5d93ef952b5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/6b847d65f5b0065e02080c61fad93d57d6686383"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/9e9fa5ad37c9cbad73c165c7ff1e76e650825e7c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/fdb24a820a5832ec4532273282cbd4f22c291a0d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f28652a225dd55fd999f04a671e3adbde5e24c5590670ed33d7ac3f1f4e54e96 · sha256:e3b0ad5920a1cda0… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer