THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64368 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on allocation is requested, for kmalloc() we generally have to zero the full object size even if a smaller size is

[NVD] CVE-2026-64368 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on allocation is requested, for kmalloc() we generally have to zero the full object size even if a smaller size is

lownvdPublished 2026-07-25

CVE-2026-64368 CVSS: 8.1 HIGH Published: 2026-07-25T10:17:19.613

In the Linux kernel, the following vulnerability has been resolved:

mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

When init (zeroing) on allocation is requested, for kmalloc() we generally have to zero the full object size even if a smaller size is requested, in order to provide krealloc()'s __GFP_ZERO

Indicators of compromise

CVE-2026-64368cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64368