Out of Bounds Access in Linux Kernel's Squashfs Affects Multiple Systems
CVE-2026-23388

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 25 March 2026

What is CVE-2026-23388?

The vulnerability in the Linux kernel's Squashfs module arises from improper handling of metadata block offsets, specifically when a corrupted index lookup table leads to negative offsets. This scenario causes an out of bounds access in the function squashfs_copy_data, potentially compromising system security. The issue has been addressed by implementing checks in the squashfs_read_metadata function to ensure that offsets are within valid ranges, effectively mitigating the risk associated with corrupted metadata.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch