THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64324 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udf_free_blocks() checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A craf

[NVD] CVE-2026-64324 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udf_free_blocks() checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A craf

lownvdPublished 2026-07-25

CVE-2026-64324 CVSS: 7.8 HIGH Published: 2026-07-25T10:17:13.923

In the Linux kernel, the following vulnerability has been resolved:

udf: validate free block extents against the partition length

udf_free_blocks() checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A crafted extent can pass the guard while logicalBlockNum +

Indicators of compromise

CVE-2026-64324cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64324