THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64322 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udf_load_sparable_map() accepts a sparing table when sizeof(*st) + le16_to_cpu(st->reallocationTableLen) > sb->s_blocksize is false, i.e

[NVD] CVE-2026-64322 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udf_load_sparable_map() accepts a sparing table when sizeof(*st) + le16_to_cpu(st->reallocationTableLen) > sb->s_blocksize is false, i.e

lownvdPublished 2026-07-25

CVE-2026-64322 CVSS: 7.8 HIGH Published: 2026-07-25T10:17:13.640

In the Linux kernel, the following vulnerability has been resolved:

udf: validate sparing table length as an entry count, not a byte count

udf_load_sparable_map() accepts a sparing table when

sizeof(*st) + le16_to_cpu(st->reallocationTableLen) > sb->s_blocksize

is false, i.e. it treats reallocationTableLen as a number of BYTES

Indicators of compromise

CVE-2026-64322cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64322