Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check that the block offset is not negative. If a negative offset is read from the disk for example, the offset into the decompressed fragment block, this will cause squashfscopydata to perform an out-of-bounds access...

CVE-2026-90203

A flaw was found in Squashfs, a compressed read-only filesystem within the Linux kernel. A local attacker with administrative privileges could create a specially crafted Squashfs filesystem that contains a negative block offset. If this malicious filesystem is mounted, an unprivileged user could...