Out-of-bounds read in Linux kernel - CVE-2026-64317
Published: July 27, 2026
Vulnerability identifier: #VU139655
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64317
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to an out-of-bounds read in Rock Ridge SL record handling in fs/isofs/rock.c when parsing a crafted ISO 9660 image containing a malformed symbolic link record. A local user can supply a crafted filesystem image to disclose sensitive information.
The issue can copy adjacent kernel memory into the symlink body returned to user space by readlink().
Affected software
Linux kernel
How to mitigate CVE-2026-64317
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/1015e1c4b2fadd9c09704e24738e46598778c869
- https://git.kernel.org/stable/c/36fe7d25dbc40da0c6b1dd4513a4f69ac6164eee
- https://git.kernel.org/stable/c/5fa1d6a5ec2356d2107dead614437c66fa7138b1
- https://git.kernel.org/stable/c/6bf41db09ef935d76fcc84ccf213b42c18de95ee
- https://git.kernel.org/stable/c/9830725078c8483c6831ec10222ae724806ea36b
- https://git.kernel.org/stable/c/a22cb6bb54dc167047ea9e70d97dfbc2c15649e3
- https://git.kernel.org/stable/c/b5699642640d6cff357638738c5293985cd5a53d
- https://git.kernel.org/stable/c/b736b12108fd116c41777628f5a333791604df26