CVE-2026-43209

minix: Add required sanity checking to minix_check_superblock()

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

minix: Add required sanity checking to minix_check_superblock()

The fs/minix implementation of the minix filesystem does not currently support any other value for s_log_zone_size than 0. This is also the only value supported in util-linux; see mkfs.minix.c line 511. In addition, this patch adds some sanity checking for the other minix superblock fields, and moves the minix_blocks_needed() checks for the zmap and imap also to minix_check_super_block().

This also closes a related syzbot bug report.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a051ecf5c5b0387840dc210413ed3bc7fbdaa69cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d791c544efd6b9c944b43cf7f502e5bcb02fb941Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 66c7c239c65341f99ae388d4d53dc9df2bcb9925Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2bb588cede1c1969e49c0a2822c8cb8b346b7682Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f57ccd4657c7f082dc47e5b9e18a883bb5f9118fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 31fefc18096cdc5549cfa54964d90e0b3229aedcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1efc128ee4adbc23e082715425ff895449d233bcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8c97a6ddc95690a938ded44b4e3202f03f15078cAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a051ecf5c5b0387840dc210413ed3bc7fbdaa69cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d791c544efd6b9c944b43cf7f502e5bcb02fb941Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 66c7c239c65341f99ae388d4d53dc9df2bcb9925Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2bb588cede1c1969e49c0a2822c8cb8b346b7682Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f57ccd4657c7f082dc47e5b9e18a883bb5f9118fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 31fefc18096cdc5549cfa54964d90e0b3229aedcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1efc128ee4adbc23e082715425ff895449d233bcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8c97a6ddc95690a938ded44b4e3202f03f15078cAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.