The Linux kernel contained a vulnerability in the UDF filesystem implementation where the udf_read_tagged() function would skip CRC verification when the descriptor's CRC length plus the size of the tag structure exceeded the block size. An attacker could craft a UDF image with an oversized descCRCLength value to bypass CRC validation entirely, relying only on an 8-bit tag checksum which is easily recomputable. The fix involves rejecting descriptors with oversized CRC lengths instead of accepting them silently, ensuring that only valid descriptors pass integrity checks.

This vulnerability could allow an attacker to bypass CRC validation on UDF filesystem descriptors, potentially leading to acceptance of corrupted or malicious data descriptors. However, no known exploits are reported in the wild. The impact is limited to the integrity verification of UDF filesystem descriptors in the Linux kernel.

A fix has been implemented to reject descriptors with oversized CRC lengths. Users should apply the official Linux kernel updates that include this fix once available. Since this is a kernel vulnerability, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories for the current remediation status.