CVE-2026-53369
In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged() skips CRC verification when descCRCLength + sizeof(struct tag) exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC validation entirely; the descriptor is then accepted based solely on the 8-bit tag checksum, which is trivially recomputable. Reject such descriptors instead of silently accepting them. A legitimate single-block descriptor should never have a CRC length that exceeds the block.
Affected versions
Linux kernel versions
2.6.12
and later are affected. Fixed in
5.10.258,
5.15.209,
6.1.175,
6.6.140,
6.12.88,
6.18.30,
7.0.7,
7.1
and their respective stable series.
References
8 totalFrequently asked questions
-
What is CVE-2026-53369?
CVE-2026-53369 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 2.6.12 onward and has been patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-53369 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-53369?
Yes — CVE-2026-53369 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 2.6.12 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-53369 actively exploited?
No — CVE-2026-53369 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.