CVE-2026-64317 | Linux Kernel up to 7.1.3 isofs get_symlink_chunk/parse_rock_ridge_inode_internal len out-of-bounds

July 25, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.3. This vulnerability affects the function get_symlink_chunk/parse_rock_ridge_inode_internal of the component isofs. The manipulation of the argument len leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-64317. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More