CVE-2026-64217 PUBLISHED

netfs: Fix overrun check in netfs_extract_user_iter()

Assigner: Linux
Reserved: 19.07.2026 Published: 24.07.2026 Updated: 24.07.2026

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix overrun check in netfs_extract_user_iter()

Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get included in the iterator constructed at the end of the function. If there was an overfill, memory corruption has already happened.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 85dd2c8ff368b1446be9febde84afe1d7aec4261 to 00efe58bbdcc93272d579ca24bfc912563f4a204 (excl.)
  • affected from 85dd2c8ff368b1446be9febde84afe1d7aec4261 to 96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9 (excl.)
  • affected from 85dd2c8ff368b1446be9febde84afe1d7aec4261 to afeb32d9bf9aaeea51d0f723a19f14afb73bd94d (excl.)
  • affected from 85dd2c8ff368b1446be9febde84afe1d7aec4261 to f48b9157f0f611fa436c360648603d5ded719b12 (excl.)
  • affected from 85dd2c8ff368b1446be9febde84afe1d7aec4261 to 0ef37eef83fad3542ee06db2940433ae1a92b39d (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.3 is affected
  • unaffected from 0 to 6.3 (excl.)
  • unaffected from 6.6.142 to 6.6.* (incl.)
  • unaffected from 6.12.92 to 6.12.* (incl.)
  • unaffected from 6.18.34 to 6.18.* (incl.)
  • unaffected from 7.0.11 to 7.0.* (incl.)
  • unaffected from 7.1 to * (incl.)

References