--- x/fs/udf/super.c +++ y/fs/udf/super.c @@ -2337,6 +2337,8 @@ static int udf_sync_fs(struct super_bloc struct logicalVolIntegrityDesc *lvid; lvid = (struct logicalVolIntegrityDesc *)bh->b_data; + WARN_ON(le16_to_cpu(lvid->descTag.descCRCLength) + sizeof(struct tag) > + sb->s_blocksize); udf_finalize_lvid(lvid); /*