Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2026-23388: Linux kernel SquashFS may cause crash
CVE-2026-23388 · published 7 months ago
Summary
The SquashFS component in the Linux kernel used by Debian and several Ubuntu (Canonical) cloud and OEM versions can miscalculate a data offset, leading to an out‑of‑bounds memory access that may crash the system. This occurs when a corrupted index table creates a negative offset during file reads. Install the latest kernel updates from your distribution to apply the fix and avoid potential crashes.
What to do
- Update debian linux to version 6.19.8-1.
- Update debian rootio-linux to version 6.12.74-2.root.io.103.
- Update canonical linux-aws-5.15 to version 5.15.0-1112.119~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1117.126~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1117.126~20.04.2.
- Update canonical linux-gcp-5.15 to version 5.15.0-1112.122~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-186.196~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1106.110~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1107.113~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-184.194~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1064.66~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1109.115~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1106.110~20.04.1.
- Update canonical linux to version 5.15.0-186.196.
- Update canonical linux-aws to version 5.15.0-1112.119.
- Update canonical linux-aws-6.8 to version 6.8.0-1061.64~22.04.1.
- Update canonical linux-azure to version 5.15.0-1117.126.
- Update canonical linux-azure-6.8 to version 6.8.0-1063.71~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1117.126.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1062.69~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1112.122.
- Update canonical linux-gcp-6.8 to version 6.8.0-1064.72~22.04.1.
- Update canonical linux-gke to version 5.15.0-1108.114.
- Update canonical linux-gkeop to version 5.15.0-1095.103.
- Update canonical linux-hwe-6.8 to version 6.8.0-136.136~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1106.110.
- Update canonical linux-ibm-6.8 to version 6.8.0-1061.62~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1107.113.
- Update canonical linux-kvm to version 5.15.0-1104.109.
- Update canonical linux-lowlatency to version 5.15.0-184.194.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-136.136.2~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1107.108.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1059.62~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1064.66.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1053.53.
- Update canonical linux-oracle to version 5.15.0-1109.115.
- Update canonical linux-oracle-6.8 to version 6.8.0-1058.61~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-136.136~22.04.3.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1075.79.
- Update canonical linux-bluefield to version 5.15.0-1096.98.
- Update canonical linux-aws-fips to version 5.15.0-1112.119+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1117.126+fips1.
- Update canonical linux-fips to version 5.15.0-186.196+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1112.122+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1104.106.
- Update canonical linux-realtime to version 5.15.0-1111.120.
- Update canonical linux-realtime-6.8 to version 6.8.1-1056.57~22.04.2.
- Update canonical linux to version 6.8.0-136.136.
- Update canonical linux-aws to version 6.8.0-1061.64.
- Update canonical linux-azure to version 6.8.0-1063.71.
- Update canonical linux-azure-fde to version 6.8.0-1062.69.
- Update canonical linux-gcp to version 6.8.0-1064.72.
- Update canonical linux-gke to version 6.8.0-1059.67.
- Update canonical linux-gkeop to version 6.8.0-1046.50.
- Update canonical linux-ibm to version 6.8.0-1061.62.
- Update canonical linux-lowlatency to version 6.8.0-136.136.2.
- Update canonical linux-nvidia to version 6.8.0-1059.62.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1059.62.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1030.31.
- Update canonical linux-oracle to version 6.8.0-1058.61.
- Update canonical linux-raspi to version 6.8.0-1061.65.
- Update canonical linux-xilinx to version 6.8.0-1033.34.
- Update canonical linux-aws-fips to version 6.8.0-1061.64+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1063.71+fips2.
- Update canonical linux-fips to version 6.8.0-136.136+fips2.
- Update canonical linux-gcp-fips to version 6.8.0-1064.72+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2050.52.
- Update canonical linux-realtime to version 6.8.1-1056.57.
- Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update debian rootio-linux to version 5.10.251-1.root.io.66.
- Update debian rootio-linux to version 5.10.251-3.root.io.75.
- Update debian rootio-linux to version 6.1.164-1.root.io.112.
- Update debian rootio-linux to version 6.12.100-1.aikido.156.
- Update debian linux to version 6.12.100-1.aikido.156.
- Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
- Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
- Update canonical linux-raspi to version 5.15.0-1106.109.
- Update canonical linux-bluefield to version 6.8.0-1028.33.
- Update debian linux to version 6.1.170-1.
- Update debian linux to version 6.12.85-1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux kernel to version 6.19.7.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update linux linux to version 60f679f643f3f36a8571ea585e4ce5d93ef952b5 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:14 | debian | linux |
< 6.19.8-1 Fix: upgrade to 6.19.8-1
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
Showing 50 of 264. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1112.119~20.04.1 Fix: upgrade to 5.15.0-1112.119~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1117.126~20.04.1 Fix: upgrade to 5.15.0-1117.126~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1117.126~20.04.2 Fix: upgrade to 5.15.0-1117.126~20.04.2
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1112.122~20.04.1 Fix: upgrade to 5.15.0-1112.122~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-186.196~20.04.1 Fix: upgrade to 5.15.0-186.196~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1106.110~20.04.1 Fix: upgrade to 5.15.0-1106.110~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1107.113~20.04.1 Fix: upgrade to 5.15.0-1107.113~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-184.194~20.04.1 Fix: upgrade to 5.15.0-184.194~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1064.66~20.04.1 Fix: upgrade to 5.15.0-1064.66~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1109.115~20.04.1 Fix: upgrade to 5.15.0-1109.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1106.110~20.04.1 Fix: upgrade to 5.15.0-1106.110~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-186.196 Fix: upgrade to 5.15.0-186.196
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1112.119 Fix: upgrade to 5.15.0-1112.119
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1061.64~22.04.1 Fix: upgrade to 6.8.0-1061.64~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1117.126 Fix: upgrade to 5.15.0-1117.126
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1063.71~22.04.1 Fix: upgrade to 6.8.0-1063.71~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1117.126 Fix: upgrade to 5.15.0-1117.126
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1062.69~22.04.1 Fix: upgrade to 6.8.0-1062.69~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1112.122 Fix: upgrade to 5.15.0-1112.122
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1064.72~22.04.1 Fix: upgrade to 6.8.0-1064.72~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1108.114 Fix: upgrade to 5.15.0-1108.114
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1095.103 Fix: upgrade to 5.15.0-1095.103
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-136.136~22.04.1 Fix: upgrade to 6.8.0-136.136~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1106.110 Fix: upgrade to 5.15.0-1106.110
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1061.62~22.04.1 Fix: upgrade to 6.8.0-1061.62~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1107.113 Fix: upgrade to 5.15.0-1107.113
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1104.109 Fix: upgrade to 5.15.0-1104.109
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-184.194 Fix: upgrade to 5.15.0-184.194
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-136.136.2~22.04.1 Fix: upgrade to 6.8.0-136.136.2~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1107.108 Fix: upgrade to 5.15.0-1107.108
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1059.62~22.04.1 Fix: upgrade to 6.8.0-1059.62~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1064.66 Fix: upgrade to 5.15.0-1064.66
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1053.53 Fix: upgrade to 5.15.0-1053.53
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1109.115 Fix: upgrade to 5.15.0-1109.115
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1058.61~22.04.1 Fix: upgrade to 6.8.0-1058.61~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1106.109 Fix: upgrade to 5.15.0-1106.109
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-136.136~22.04.3 Fix: upgrade to 6.8.0-136.136~22.04.3
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1075.79 Fix: upgrade to 5.15.0-1075.79
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1096.98 Fix: upgrade to 5.15.0-1096.98
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1112.119+fips1 Fix: upgrade to 5.15.0-1112.119+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1117.126+fips1 Fix: upgrade to 5.15.0-1117.126+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-186.196+fips1 Fix: upgrade to 5.15.0-186.196+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1112.122+fips1 Fix: upgrade to 5.15.0-1112.122+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1104.106 Fix: upgrade to 5.15.0-1104.106
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1111.120 Fix: upgrade to 5.15.0-1111.120
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1056.57~22.04.2 Fix: upgrade to 6.8.1-1056.57~22.04.2
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-136.136 Fix: upgrade to 6.8.0-136.136
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1061.64 Fix: upgrade to 6.8.0-1061.64
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1063.71 Fix: upgrade to 6.8.0-1063.71
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1062.69 Fix: upgrade to 6.8.0-1062.69
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1064.72 Fix: upgrade to 6.8.0-1064.72
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1059.67 Fix: upgrade to 6.8.0-1059.67
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1046.50 Fix: upgrade to 6.8.0-1046.50
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1061.65 Fix: upgrade to 6.8.0-1061.65
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1033.34 Fix: upgrade to 6.8.0-1033.34
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1028.33 Fix: upgrade to 6.8.0-1028.33
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1061.64+fips1 Fix: upgrade to 6.8.0-1061.64+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1063.71+fips2 Fix: upgrade to 6.8.0-1063.71+fips2
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-136.136+fips2 Fix: upgrade to 6.8.0-136.136+fips2
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1064.72+fips1 Fix: upgrade to 6.8.0-1064.72+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2050.52 Fix: upgrade to 6.8.0-2050.52
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1056.57 Fix: upgrade to 6.8.1-1056.57
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:25.10 | canonical | linux | All versions |
| Ubuntu:25.10 | canonical | linux-aws | All versions |
| Ubuntu:25.10 | canonical | linux-azure | All versions |
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp | All versions |
| Ubuntu:25.10 | canonical | linux-oracle | All versions |
| Ubuntu:25.10 | canonical | linux-raspi | All versions |
| Ubuntu:25.10 | canonical | linux-realtime | All versions |
| Ubuntu:25.10 | canonical | linux-riscv | All versions |
| Debian:11 | debian | linux | All versions |
| Debian:12 | debian | linux |
< 6.1.170-1 Fix: upgrade to 6.1.170-1
|
| Debian:13 | debian | linux |
< 6.12.85-1 Fix: upgrade to 6.12.85-1
|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.74-2.root.io.103 < 6.12.100-1.aikido.156 Fix: upgrade to 6.12.74-2.root.io.103
|
| – | linux | linux_kernel |
>= 2.6.29.1, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.167 >= 6.2, < 6.6.130 >= 6.7, < 6.12.77 >= 6.13, < 6.18.17 >= 6.19, < 6.19.7 2.6.29 7.0 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1061.62 Fix: upgrade to 6.8.0-1061.62
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-136.136.2 Fix: upgrade to 6.8.0-136.136.2
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1059.62 Fix: upgrade to 6.8.0-1059.62
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1059.62.1 Fix: upgrade to 6.8.0-1059.62.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1030.31 Fix: upgrade to 6.8.0-1030.31
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1058.61 Fix: upgrade to 6.8.0-1058.61
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-185.195.root.io.101 < 5.15.0-186.196.root.io.103 < 5.15.0-186.196.aikido.104 Fix: upgrade to 5.15.0-185.195.root.io.101
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-136.136.root.io.83
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.251-1.root.io.66 < 5.10.251-3.root.io.75 Fix: upgrade to 5.10.251-1.root.io.66
|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.164-1.root.io.112 Fix: upgrade to 6.1.164-1.root.io.112
|
| Root:Debian:13 | debian | linux |
< 6.12.100-1.aikido.156 Fix: upgrade to 6.12.100-1.aikido.156
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| – | linux | linux |
< 60f679f643f3f36a8571ea585e4ce5d93ef952b5 2.6.29 |
| Linux | linux | kernel |
>= 6.19.0, < 6.19.7 Fix: upgrade to 6.19.7
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2026-23388 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protection fault in squashfs_copy_data" This is ultimately caused by a corrupted index look-up table, which produces a negative metadata block offset. This is subsequently passed to squashfs_copy_data (via squashfs_read_metadata) where the negative offset causes an out of bounds access. The fix is to check that the offset is within range in squashfs_read_metadata. This will trap this and other cases.
References
- https://security-tracker.debian.org/tracker/CVE-2026-23388 Vendor Advisory
- https://git.kernel.org/stable/c/3f68a9457a6190814377577374da75f872e0a013 URL
- https://git.kernel.org/stable/c/60f679f643f3f36a8571ea585e4ce5d93ef952b5 URL
- https://git.kernel.org/stable/c/01ee0bcc29864b78249308e8b35042b09bbf5fe3 Third Party Advisory
- https://git.kernel.org/stable/c/0c8ab092aec3ac4294940054772d30b511b16713 Third Party Advisory
- https://git.kernel.org/stable/c/9e9fa5ad37c9cbad73c165c7ff1e76e650825e7c Third Party Advisory
- https://ubuntu.com/security/notices/USN-8620-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8620-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8620-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8668-2 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23388... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23388 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8567-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8608-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8609-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8575-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8610-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8595-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8619-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8620-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8665-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-23388 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-23388 Third Party Advisory
- https://git.kernel.org/linus/fdb24a820a5832ec4532273282cbd4f22c291a0d Third Party Advisory
- https://git.kernel.org/stable/c/3b9499e7d677dd4366239a292238489a804936b2 Third Party Advisory
- https://git.kernel.org/stable/c/6b847d65f5b0065e02080c61fad93d57d6686383 Third Party Advisory
- https://git.kernel.org/stable/c/fdb24a820a5832ec4532273282cbd4f22c291a0d Third Party Advisory
- https://ubuntu.com/security/notices/USN-8574-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8575-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8576-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8574-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8595-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8596-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8575-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8576-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8597-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8595-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8606-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8607-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8574-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8668-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
8.3
High
Type
CWE-125Out-of-bounds Read
Timeline
Published25 Mar 2026
Updated4 Nov 2026
First seen25 Mar 2026
Sources
CVE-2026-23388 · NVD
DEBIAN-CVE-2026-23388 · OSV
UBUNTU-CVE-2026-23388 · OSV
CVE-2026-23388 · MITRE
CVE-2026-23388 · OSV
Track software like this
Free during beta