THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64323 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udf_load_vat() takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size: ma

[NVD] CVE-2026-64323 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udf_load_vat() takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size: ma

lownvdPublished 2026-07-25

CVE-2026-64323 CVSS: 7.1 HIGH Published: 2026-07-25T10:17:13.790

In the Linux kernel, the following vulnerability has been resolved:

udf: validate VAT header length against the VAT inode size

udf_load_vat() takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size:

map->s_type_specific.s_virtual.s_start_offset = le16_t

Indicators of compromise

CVE-2026-64323cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64323