High 7.8Published Jul 24, 2026

CVE-2026-64217netfs: Fix overrun check in netfs_extract_user_iter()

Updated under an hour ago (Oct 26, 2026, 5:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get included in the iterator constructed at the end of the function. If there was an overfill, memory corruption has already happened.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	85dd2c8ff368b1446be9febde84afe1d7aec4261 builds before 00efe58bbdcc93272d579ca24bfc912563f4a204; from 85dd2c8ff368b1446be9febde84afe1d7aec4261 before 96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9; from 85dd2c8ff368b1446be9febde84afe1d7aec4261 before afeb32d9bf9aaeea51d0f723a19f14afb73bd94d; from 85dd2c8ff368b1446be9febde84afe1d7aec4261 before f48b9157f0f611fa436c360648603d5ded719b12; 85dd2c8ff368b1446be9febde84afe1d7aec4261 builds before 0ef37eef83fad3542ee06db2940433ae1a92b39d	CNA record
linux linux_kernel linux:linux_kernel	from 6.3 before 6.6.142; from 6.7 before 6.12.92; from 6.13 before 6.18.34; from 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/00efe58bbdcc93272d579ca24bfc912563f4a204	patch
https://git.kernel.org/stable/c/96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9	patch
https://git.kernel.org/stable/c/afeb32d9bf9aaeea51d0f723a19f14afb73bd94d	patch
https://git.kernel.org/stable/c/f48b9157f0f611fa436c360648603d5ded719b12	patch
https://git.kernel.org/stable/c/0ef37eef83fad3542ee06db2940433ae1a92b39d	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.