In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged() skips CRC verification when descCRCLength + sizeof(struct tag) exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC validation entirely; the descriptor is then accepted based solely on the 8-bit tag checksum, which is trivially recomputable. Reject such descriptors instead of silently accepting them. A legitimate single-block descriptor should never have a CRC length that exceeds the block.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 2.6.12CNA affecteddefault affected | |
| Linux | Linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1873eb81c65d3f849418d7386baa39c439c9fc38, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 31605bbe94557bff721eaf041001169d44ac6f98, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3dede76d525919bb966f9213e131af685de5ff99, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 50dfaf4a027742b4fcdc3e9305e7199ece9bc6a6, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 55d41b0a20128e86b9e960dd2e3f0a2d69a18df7, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7d1b6adbf90df6c8941090d5646fbeca25ba9770, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 832ab4a882dc9b3c0155490d9993642ef545fd22, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < fdb26e628d2a211a23815d375bd33bdf863344e2CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel vulnerabilities
Jul 24, 2026Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel (Azure FIPS) vulnerabilities
Jul 24, 2026Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel (Azure) vulnerabilities
Jul 24, 2026Linux kernel (AWS) vulnerabilities
Jul 24, 2026Linux kernel (Azure) vulnerabilities
Jul 24, 2026Linux kernel (NVIDIA) vulnerabilities
Jul 23, 2026Linux kernel (Oracle) vulnerabilities
Jul 23, 2026Linux kernel vulnerabilities
Jul 23, 2026Linux kernel vulnerabilities
Jul 23, 2026Linux kernel (NVIDIA Tegra) vulnerabilities
Jul 21, 2026Linux kernel vulnerabilities
Jul 21, 2026Linux kernel (GCP FIPS) vulnerabilities
Jul 21, 2026