AZL-80601
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-80601.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-80601
- Upstream
- Published
- 2026-03-25T11:16:39Z
- Modified
- 2026-08-28T17:46:33.985342087Z
- Summary
- CVE-2026-23388 affecting package kernel for versions less than 6.6.130.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check metadata block offset is within range
Syzkaller reports a "general protection fault in squashfscopydata"
This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offset.
This is subsequently passed to squashfscopydata (via squashfsreadmetadata) where the negative offset causes an out of bounds access.
The fix is to check that the offset is within range in squashfsreadmetadata. This will trap this and other cases.
- References