CVE-2026-23238
mediumpriority · track · 22EPSS 0.002 · 10 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: romfs: check sb_set_blocksize() return value romfs_fill_super() ignores the return value of sb_set_blocksize(), which can fail if the requested block size is incompatible with the block device's configuration. This can be triggered by setting a loop device's block size larger than PAGE_SIZE using ioctl(LOOP_SET_BLOCK_SIZE, 32768), then mounting a romfs filesystem on that device. When sb_set_blocksize(sb, ROMBSIZE) is called with ROMBSIZE=4096 but the device has logical_block_size=32768, bdev_validate_blocksize() fails because the requested size is smaller than the device's logical block size. sb_set_blocksize() returns 0 (failure), but romfs ignores this and continues mounting. The superblock's block size remains at the device's logical block size (32768). Later, when sb_bread() attempts I/O with this oversized block size, it triggers a kernel BUG in folio_set_bh(): kernel BUG at fs/buffer.c:1582! BUG_ON(size > PAGE_SIZE); Fix by checking the return value of sb_set_blocksize() and failing the mount with -EINVAL if it returns 0.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002573/ - FixedRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002573/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (66)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- SSA-253495SSA-253495: Multiple Vulnerabilities in SINEC OS before V4.02026-06-02csaf · siemens_psirtDE
SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.
- WID-SEC-W-2026-0614Linux Kernel: Mehrere SchwachstellenDeutsch2026-03-04csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service-Bedingung führen oder eine Speicherbeschädigung verursachen können.
- ICSA-26-188-05Siemens SINEC OS2026-06-02icsa · cisa_csaf_otUS
SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (23)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/2c5829cd8fbbc91568c520b666898f57cdcb8cf6cnnvd
- https://git.kernel.org/stable/c/4b71ad7676564a94ec5f7d18298f51e8ae53db73cnnvd
- https://git.kernel.org/stable/c/9b203b8ddd7359270e8a694d0584743555128e2ccnnvd
- https://git.kernel.org/stable/c/a381f0f61b35c8894b0bd0d6acef2d8f9b08b244cnnvd
- https://git.kernel.org/stable/c/ab7ad7abb3660c58ffffdf07ff3bb976e7e0afa0cnnvd
- https://git.kernel.org/stable/c/cbd9931e6456822067725354d83446c5bb813030cnnvd
- https://git.kernel.org/stable/c/f2521ab1f63a8c244f06a080319e5ff9a2e1bd95cnnvd
- https://www.kernel.org/Patchcnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan