Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2026-64317: Linux kernel may expose kernel memory when reading ISO files
CVE-2026-64317 · published 3 months ago
Summary
The Linux kernel can incorrectly read data from specially crafted ISO images, potentially revealing parts of its own memory. This can happen when removable media with ISO files are mounted automatically, allowing an attacker to see information they shouldn't. Updating the kernel to the latest version fixes the issue, so apply the latest Linux updates as soon as possible.
What to do
- Update debian linux to version 6.12.96-1.
- Update debian rootio-linux to version 6.1.177-1.aikido.162.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-azure to version 7.0.0-1014.14.
- Update canonical linux-ibm to version 7.0.0-1013.13.
- Update canonical linux-nvidia to version 7.0.0-1018.18.
- Update canonical linux-nvidia-bos to version 7.0.0-2018.18.
- Update canonical linux-oracle to version 7.0.0-1011.11.
- Update canonical linux-aws-7.0 to version 7.0.0-1012.12~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-31.31~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-31.31.1~24.04.1.
- Update canonical linux to version 7.0.0-31.31.
- Update canonical linux-aws to version 7.0.0-1012.12.
- Update canonical linux-gcp to version 7.0.0-1011.11.
- Update canonical linux-gke to version 7.0.0-1006.7.
- Update canonical linux-oem-7.0 to version 7.0.0-1013.13.
- Update canonical linux-realtime to version 7.0.0-31.31.1.
- Update canonical linux-riscv to version 7.0.0-31.31.1.
- Update linux kernel to version 7.1.4.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1018.18~24.04.1.
- Update canonical linux-raspi to version 7.0.0-1019.19.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update debian linux to version 6.1.180-1.
- Update debian linux to version 7.1.4-1.
- Update debian linux-6.12 to version 6.12.100-1~deb12u1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update canonical linux-aws-5.15 to version 5.15.0-1117.124~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1123.132~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1122.131~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-198.208~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1111.115~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1112.118~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-195.205~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux to version 5.15.0-198.208.
- Update canonical linux-aws to version 5.15.0-1117.124.
- Update canonical linux-azure to version 5.15.0-1123.132.
- Update canonical linux-azure-fde to version 5.15.0-1122.131.
- Update canonical linux-gcp to version 5.15.0-1118.128.
- Update canonical linux-gke to version 5.15.0-1113.119.
- Update canonical linux-gkeop to version 5.15.0-1100.108.
- Update canonical linux-ibm to version 5.15.0-1111.115.
- Update canonical linux-intel-iotg to version 5.15.0-1112.118.
- Update canonical linux-kvm to version 5.15.0-1109.114.
- Update canonical linux-lowlatency to version 5.15.0-195.205.
- Update canonical linux-nvidia to version 5.15.0-1112.113.
- Update canonical linux-oracle to version 5.15.0-1114.120.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1080.84.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1109.111.
- Update canonical linux-realtime to version 5.15.0-1116.125.
- Update canonical linux-aws-fips to version 5.15.0-1117.124+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1123.132+fips1.
- Update canonical linux-fips to version 5.15.0-198.208+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1118.128+fips1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1036.39.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update canonical linux-riscv-5.15 to version 5.15.0-1111.115~20.04.1.
- Update canonical linux-bluefield to version 5.15.0-1101.103.
- Update canonical linux to version 6.8.0-147.147.
- Update canonical linux-aws to version 6.8.0-1067.70.
- Update canonical linux-azure to version 6.8.0-1071.79.
- Update canonical linux-azure-fde to version 6.8.0-1069.76.
- Update canonical linux-azure-fde-7.0 to version 7.0.0-1013.13~24.04.1.
- Update canonical linux-gcp to version 6.8.0-1071.79.
- Update canonical linux-gke to version 6.8.0-1066.74.
- Update canonical linux-gkeop to version 6.8.0-1052.56.
- Update canonical linux-ibm to version 6.8.0-1067.68.
- Update canonical linux-lowlatency to version 6.8.0-147.147.1.
- Update canonical linux-oracle to version 6.8.0-1064.67.
- Update canonical linux-bluefield to version 6.8.0-1033.38.
- Update canonical linux-realtime to version 6.8.1-1062.63.
- Update canonical linux-aws-fips to version 6.8.0-1067.70+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1071.79+fips1.
- Update canonical linux-fips to version 6.8.0-147.147+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1071.79+fips1.
- Update canonical linux-azure-fde to version 7.0.0-1013.13.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update linux linux to version 1015e1c4b2fadd9c09704e24738e46598778c869 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1117.124~20.04.1 Fix: upgrade to 5.15.0-1117.124~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1123.132~20.04.1 Fix: upgrade to 5.15.0-1123.132~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1122.131~20.04.1 Fix: upgrade to 5.15.0-1122.131~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1118.128~20.04.1 Fix: upgrade to 5.15.0-1118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
Showing 50 of 228. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-198.208~20.04.1 Fix: upgrade to 5.15.0-198.208~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1111.115~20.04.1 Fix: upgrade to 5.15.0-1111.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1112.118~20.04.1 Fix: upgrade to 5.15.0-1112.118~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-195.205~20.04.1 Fix: upgrade to 5.15.0-195.205~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1111.115~20.04.1 Fix: upgrade to 5.15.0-1111.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1112.118 Fix: upgrade to 5.15.0-1112.118
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-195.205 Fix: upgrade to 5.15.0-195.205
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1112.113 Fix: upgrade to 5.15.0-1112.113
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1012.12~24.04.1 Fix: upgrade to 7.0.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 |
< 7.0.0-1013.13~24.04.1 Fix: upgrade to 7.0.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-31.31~24.04.1 Fix: upgrade to 7.0.0-31.31~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1018.18~24.04.1 Fix: upgrade to 7.0.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-31.31.1~24.04.1 Fix: upgrade to 7.0.0-31.31.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2018.18 Fix: upgrade to 7.0.0-2018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| – | linux | linux |
< 1015e1c4b2fadd9c09704e24738e46598778c869 2.6.12 |
| Debian:11 | debian | linux | All versions |
| Debian:12 | debian | linux |
< 6.1.180-1 Fix: upgrade to 6.1.180-1
|
| Debian:13 | debian | linux |
< 6.12.96-1 Fix: upgrade to 6.12.96-1
|
| Debian:14 | debian | linux |
< 7.1.4-1 Fix: upgrade to 7.1.4-1
|
| – | linux | linux_kernel |
>= 2.6.12.1, < 5.10.261 >= 5.11, < 5.15.212 >= 5.16, < 6.1.178 >= 6.2, < 6.6.145 >= 6.7, < 6.12.96 >= 6.13, < 6.18.39 >= 6.19, < 7.1.4 2.6.12 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:12 | debian | rootio-linux |
< 6.1.177-1.aikido.162 Fix: upgrade to 6.1.177-1.aikido.162
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1018.18 Fix: upgrade to 7.0.0-1018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-31.31 Fix: upgrade to 7.0.0-31.31
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1012.12 Fix: upgrade to 7.0.0-1012.12
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1006.7 Fix: upgrade to 7.0.0-1006.7
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Linux | linux | kernel |
>= 6.19.0, < 7.1.4 Fix: upgrade to 7.1.4
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1019.19 Fix: upgrade to 7.0.0-1019.19
|
| Debian:12 | debian | linux-6.12 |
< 6.12.100-1~deb12u1 Fix: upgrade to 6.12.100-1~deb12u1
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-198.208 Fix: upgrade to 5.15.0-198.208
|
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1117.124 Fix: upgrade to 5.15.0-1117.124
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1123.132 Fix: upgrade to 5.15.0-1123.132
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1122.131 Fix: upgrade to 5.15.0-1122.131
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1118.128 Fix: upgrade to 5.15.0-1118.128
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1113.119 Fix: upgrade to 5.15.0-1113.119
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1100.108 Fix: upgrade to 5.15.0-1100.108
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1111.115 Fix: upgrade to 5.15.0-1111.115
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1109.114 Fix: upgrade to 5.15.0-1109.114
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1114.120 Fix: upgrade to 5.15.0-1114.120
|
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1080.84 Fix: upgrade to 5.15.0-1080.84
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1109.111 Fix: upgrade to 5.15.0-1109.111
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1116.125 Fix: upgrade to 5.15.0-1116.125
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1117.124+fips1 Fix: upgrade to 5.15.0-1117.124+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1123.132+fips1 Fix: upgrade to 5.15.0-1123.132+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-198.208+fips1 Fix: upgrade to 5.15.0-198.208+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1118.128+fips1 Fix: upgrade to 5.15.0-1118.128+fips1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1036.39 Fix: upgrade to 6.8.0-1036.39
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1101.103 Fix: upgrade to 5.15.0-1101.103
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-147.147 Fix: upgrade to 6.8.0-147.147
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1067.70 Fix: upgrade to 6.8.0-1067.70
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1069.76 Fix: upgrade to 6.8.0-1069.76
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1066.74 Fix: upgrade to 6.8.0-1066.74
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1052.56 Fix: upgrade to 6.8.0-1052.56
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1067.68 Fix: upgrade to 6.8.0-1067.68
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-147.147.1 Fix: upgrade to 6.8.0-147.147.1
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1064.67 Fix: upgrade to 6.8.0-1064.67
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1033.38 Fix: upgrade to 6.8.0-1033.38
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1062.63 Fix: upgrade to 6.8.1-1062.63
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1067.70+fips1 Fix: upgrade to 6.8.0-1067.70+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-147.147+fips1 Fix: upgrade to 6.8.0-147.147+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
Original advisory text
CVE-2026-64317 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record get_symlink_chunk() and the SL handling in parse_rock_ridge_inode_internal() walk the variable-length components of a Rock Ridge "SL" (symbolic link) record. Each component is a two-byte header (flags, len) followed by len bytes of text, so it occupies slp->len + 2 bytes. Both loops read slp->len and advance to the next component, and get_symlink_chunk() additionally does memcpy(rpnt, slp->text, slp->len), but neither checks that the component lies within the SL record before dereferencing it. A crafted SL record whose component declares a len that runs past the record (rr->len) therefore triggers an out-of-bounds read of up to 255 bytes. When the record sits at the tail of its backing buffer - for example a small kmalloc()ed continuation block reached through a CE record - the read crosses the allocation; get_symlink_chunk() then copies the out-of-bounds bytes into the symlink body returned to user space by readlink(), disclosing adjacent kernel memory. ISO 9660 images are routinely mounted from untrusted removable media - desktop environments auto-mount them (e.g. via udisks2) without CAP_SYS_ADMIN - so the record contents are attacker-controlled. Reject any component that does not fit in the remaining record bytes before using it. In get_symlink_chunk() return NULL, like the existing output-buffer (plimit) checks, so a malformed record makes readlink() fail with -EIO rather than silently returning a truncated target; in parse_rock_ridge_inode_internal() stop the inode-size walk.
References
- https://security-tracker.debian.org/tracker/CVE-2026-64317 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html URL
- https://ubuntu.com/security/CVE-2026-64317 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-64317 Third Party Advisory
- https://git.kernel.org/stable/c/1015e1c4b2fadd9c09704e24738e46598778c869 Third Party Advisory
- https://git.kernel.org/stable/c/36fe7d25dbc40da0c6b1dd4513a4f69ac6164eee Third Party Advisory
- https://git.kernel.org/stable/c/9830725078c8483c6831ec10222ae724806ea36b Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64317... Vendor Advisory
- https://git.kernel.org/stable/c/b5699642640d6cff357638738c5293985cd5a53d Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8726-3 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-64317 Vendor Advisory
- https://git.kernel.org/stable/c/5fa1d6a5ec2356d2107dead614437c66fa7138b1 Third Party Advisory
- https://git.kernel.org/stable/c/6bf41db09ef935d76fcc84ccf213b42c18de95ee Third Party Advisory
- https://ubuntu.com/security/notices/USN-8726-2 Vendor Advisory
- https://git.kernel.org/stable/c/a22cb6bb54dc167047ea9e70d97dfbc2c15649e3 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
- https://git.kernel.org/linus/5fa1d6a5ec2356d2107dead614437c66fa7138b1 Third Party Advisory
- https://git.kernel.org/stable/c/b736b12108fd116c41777628f5a333791604df26 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8726-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8727-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8800-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8876-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8878-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8879-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8877-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8886-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8917-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8918-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published25 Jul 2026
Updated30 Oct 2026
First seen25 Jul 2026
Sources
CVE-2026-64317 · NVD
CVE-2026-64317 · MITRE
DEBIAN-CVE-2026-64317 · OSV
UBUNTU-CVE-2026-64317 · OSV
CVE-2026-64317 · OSV
Track software like this
Free during beta