CVE-2026-64319 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 nvmet-auth nvmet_auth_reply hl/dhvlen out-of-bounds

A vulnerability has been found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 and classified as critical. Impacted is the function nvmet_auth_reply of the component nvmet-auth. This manipulation of the argument hl/dhvlen causes out-of-bounds read.

This vulnerability appears as CVE-2026-64319. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More