Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53130

In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START omfs_fill_super() rejects oversized s_sys_blocksize values (> PAGE_SIZE), but it does not reject values smaller than OMFS_DIR_START (0x1b8 = 440). Later, omfs_make_empty() uses sbi->s_sys_blocksize - OMFS_DIR_START as the length argument to memset(). Since s_sys_blocksize is u32, a crafted filesystem image with s_sys_blocksize < OMFS_DIR_START causes an unsign
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6efde2de1dbaed80cd935c496ba1ce7426423260740f68697dc361cbcb1d3e15
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/omfs/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"fbc72f5c645155dc2ed3573243ed20f9913e3a54","status":"affected","version":"a3ab7155ea21aadc8a4d5687e91b3d876973185e","versionType":"git"},{"lessThan":"5822a05a841a10794ad818620dd2af490b0705d3","status":"affected","version":"a3ab7155ea21aadc8a4d5687e91b3d876973185e","versionType":"git"},{"lessThan":"754ff1bea3819a90c6f33cccfc1a299ef7609f07","status":"affected","version":"a3ab7155ea21aadc8a4d5687e91b3d…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/omfs/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/omfs/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"fbc72f5c645155dc2ed3573243ed20f9913e3a54","status":"affected","version":"a3ab7155ea21aadc8a4d5687e91b3d876973185e","versionType":"git"},{"lessThan":"5822a05a841a10794ad818620dd2af490b0705d3","status":"affected","version":"a3ab7155ea21aadc8a4d5687e91b3d876973185e","versionType":"git"},{"lessThan":"754ff1bea3819a90c6f33cccfc1a299ef7609f07","status":"affected","version":"a3ab7155ea21aadc8a4d5687e91b3d…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/omfs/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0621c385fda1376e967f37ccd534c26c3e511d14"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/131ea3e57fc22936ed0e2c8330f2e36106172f51"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/5822a05a841a10794ad818620dd2af490b0705d3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/6561afc38398e3518a29c5eebb975c30468f98a6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/754ff1bea3819a90c6f33cccfc1a299ef7609f07"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/79f84af38c9fef9deb0e02c79eb969b5541c2644"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/817f16ed62bc58a168417bfb5e859c2a370bab03"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/fbc72f5c645155dc2ed3573243ed20f9913e3a54"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:359744520dccad474134a97861a01430dd215f265558449d5b4d55c1a0d7528a · sha256:f815ab1d52ec0ba1… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer