{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.176-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.94-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.10-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START  omfs_fill_super() rejects oversized s_sys_blocksize values (\u003e PAGE_SIZE), but it does not reject values smaller than OMFS_DIR_START (0x1b8 = 440).  Later, omfs_make_empty() uses      sbi-\u003es_sys_blocksize - OMFS_DIR_START  as the length argument to memset().  Since s_sys_blocksize is u32, a crafted filesystem image with s_sys_blocksize \u003c OMFS_DIR_START causes an unsigned underflow there, wrapping to a value near 2^32.  That drives a ~4 GiB memset() from bh-\u003eb_data + OMFS_DIR_START and overwrites kernel memory far beyond the backing block buffer.  Add the corresponding lower-bound check alongside the existing upper-bound check in omfs_fill_super(), so that malformed images are rejected during superblock validation before any filesystem data is processed.",
  "id": "DEBIAN-CVE-2026-53130",
  "modified": "2026-09-14T16:47:37.675579482Z",
  "published": "2026-06-24T17:17:28.903Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-53130"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "upstream": [
    "CVE-2026-53130"
  ]
}