CVE-2026-53369 udf: reject descriptors with oversized CRC length
Attackers can bypass CRC validation in UDF filesystems by crafting images with oversized CRC lengths, accepting invalid descriptors based on weak checksums.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53369?
CVE-2026-53369 is a high-severity vulnerability in Linux kernel, published on 19 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
udf: reject descriptors with oversized CRC length
udf_read_tagged() skips CRC verification when descCRCLength + sizeof(struct tag) exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC validation entirely; the descriptor is then accepted based solely on the 8-bit tag checksum, which is trivially recomputable.
Reject such descriptors instead of silently accepting them. A legitimate single-block descriptor should never have a CRC length that exceeds the block.
Weakness: CWE-20
Which versions are affected by CVE-2026-53369?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53369?
Apply the vendor's patch.
Is CVE-2026-53369 being exploited?
There is no known exploitation of CVE-2026-53369 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-53369, DEBIAN-CVE-2026-53369, GHSA-rqjm-p6mw-3jj9, UBUNTU-CVE-2026-53369.