CVE-2026-72369

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow occurs in the Minix file system implementation when calculating bitmap block counts. The function minix check superblock() utilizes minix blocks needed(), which performs calculations using DIV ROUND UP() in unsigned int arithmetic. A specially crafted Minix v3 image can set the s ninodes or s zones variables near UINT MAX, causing the addition within DIV ROUND UP() to wrap to zero. This leads minix check superblock() to accept a zero bitmap-block count as valid. Subsequently, minix fill super() may dereference s imap[0] or s zmap[0] without allocated bitmap buffers, resulting in a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.