Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-64217
PUBLISHED
More InfoOfficial Page
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
View Known Exploited Vulnerability (KEV) details
Published At-24 Jul, 2026 | 15:23
Updated At-27 Jul, 2026 | 04:58
Rejected At-
▼CVE Numbering Authority (CNA)
netfs: Fix overrun check in netfs_extract_user_iter()

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get included in the iterator constructed at the end of the function. If there was an overfill, memory corruption has already happened.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • fs/netfs/iterator.c
Default Status
unaffected
Versions
Affected
  • From 85dd2c8ff368b1446be9febde84afe1d7aec4261 before 00efe58bbdcc93272d579ca24bfc912563f4a204 (git)
  • From 85dd2c8ff368b1446be9febde84afe1d7aec4261 before 96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9 (git)
  • From 85dd2c8ff368b1446be9febde84afe1d7aec4261 before afeb32d9bf9aaeea51d0f723a19f14afb73bd94d (git)
  • From 85dd2c8ff368b1446be9febde84afe1d7aec4261 before f48b9157f0f611fa436c360648603d5ded719b12 (git)
  • From 85dd2c8ff368b1446be9febde84afe1d7aec4261 before 0ef37eef83fad3542ee06db2940433ae1a92b39d (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • fs/netfs/iterator.c
Default Status
affected
Versions
Affected
  • 6.3
Unaffected
  • From 0 before 6.3 (semver)
  • From 6.6.142 through 6.6.* (semver)
  • From 6.12.92 through 6.12.* (semver)
  • From 6.18.34 through 6.18.* (semver)
  • From 7.0.11 through 7.0.* (semver)
  • From 7.1 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 7.8
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/00efe58bbdcc93272d579ca24bfc912563f4a204
N/A
https://git.kernel.org/stable/c/96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9
N/A
https://git.kernel.org/stable/c/afeb32d9bf9aaeea51d0f723a19f14afb73bd94d
N/A
https://git.kernel.org/stable/c/f48b9157f0f611fa436c360648603d5ded719b12
N/A
https://git.kernel.org/stable/c/0ef37eef83fad3542ee06db2940433ae1a92b39d
N/A
Hyperlink: https://git.kernel.org/stable/c/00efe58bbdcc93272d579ca24bfc912563f4a204
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/afeb32d9bf9aaeea51d0f723a19f14afb73bd94d
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/f48b9157f0f611fa436c360648603d5ded719b12
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/0ef37eef83fad3542ee06db2940433ae1a92b39d
Resource: N/A
Details not found