CVE-2026-64217
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get included in the iterator constructed at the end of the function. If there was an overfill, memory corruption has already happened.
弱点类型
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get included in the iterator constructed at the end of the function. If there was an overfill, memory corruption has already happened.
受影响产品
- linux linux_kernel
参考链接
- https://git.kernel.org/stable/c/00efe58bbdcc93272d579ca24bfc912563f4a204
- https://git.kernel.org/stable/c/0ef37eef83fad3542ee06db2940433ae1a92b39d
- https://git.kernel.org/stable/c/96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9
- https://git.kernel.org/stable/c/afeb32d9bf9aaeea51d0f723a19f14afb73bd94d
- https://git.kernel.org/stable/c/f48b9157f0f611fa436c360648603d5ded719b12