CVE-2026-53369

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the udf read tagged() function where CRC verification is skipped if the descCRCLength plus the size of the tag structure exceeds the block size. A specially crafted UDF image can set the descCRCLength variable to an oversized value to bypass CRC validation. In such cases, the descriptor is accepted based only on an 8-bit tag checksum, which is easily recomputable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.