Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43209

minix: Add required sanity checking to minix_check_superblock()

Description

In the Linux kernel, the following vulnerability has been resolved: minix: Add required sanity checking to minix_check_superblock() The fs/minix implementation of the minix filesystem does not currently support any other value for s_log_zone_size than 0. This is also the only value supported in util-linux; see mkfs.minix.c line 511. In addition, this patch adds some sanity checking for the other minix superblock fields, and moves the minix_blocks_needed() checks for the zmap and imap also to minix_check_super_block(). This also closes a related syzbot bug report.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a051ecf5c5b0387840dc210413ed3bc7fbdaa69caffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d791c544efd6b9c944b43cf7f502e5bcb02fb941affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 66c7c239c65341f99ae388d4d53dc9df2bcb9925affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2bb588cede1c1969e49c0a2822c8cb8b346b7682affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f57ccd4657c7f082dc47e5b9e18a883bb5f9118faffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 31fefc18096cdc5549cfa54964d90e0b3229aedcaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1efc128ee4adbc23e082715425ff895449d233bcaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8c97a6ddc95690a938ded44b4e3202f03f15078caffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.252 to ≤ 5.10.*unaffected
  • 5.15.202 to ≤ 5.15.*unaffected
  • 6.1.165 to ≤ 6.1.*unaffected
  • 6.6.128 to ≤ 6.6.*unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References