CVE-2026-64217

Katalog CVE

CVSS 7.8 · High EPSS 0,13%

Kerentanan Out-of-bounds Write pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get included in the iterator constructed at the end of the function. If there was an overfill, memory corruption has already happened.

Rincian

Terbit di NVD

24 Juli 2026

Terakhir diubah

11 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/00efe58bbdcc93272d579ca24bfc912563f4a204 patch
• https://git.kernel.org/stable/c/0ef37eef83fad3542ee06db2940433ae1a92b39d patch
• https://git.kernel.org/stable/c/96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9 patch
• https://git.kernel.org/stable/c/afeb32d9bf9aaeea51d0f723a19f14afb73bd94d patch
• https://git.kernel.org/stable/c/f48b9157f0f611fa436c360648603d5ded719b12 patch