CVE-2026-64368 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

🗓️ 25 Jul 2026 08:50:21Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Fix: zero only the requested size when red zoning and size tracking are active to preserve krealloc zero initialization guarantee.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-64368	25 Jul 202615:07	–	circl
CVE	CVE-2026-64368	25 Jul 202608:50	–	cve
Cvelist	CVE-2026-64368 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled	25 Jul 202608:50	–	cvelist
Debian CVE	CVE-2026-64368	25 Jul 202608:50	–	debiancve
EUVD	EUVD-2026-48912	25 Jul 202608:50	–	euvd
NVD	CVE-2026-64368	25 Jul 202610:17	–	nvd
OSV	DEBIAN-CVE-2026-64368	25 Jul 202610:17	–	osv
Positive Technologies	PT-2026-64589	25 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64368	25 Jul 202616:00	–	susecve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-64368	25 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/0d18ccef142f04433dfb2a0c120cf223d2b8a42c
git	www.git.kernel.org/stable/c/2382971aaaef5bf85a651234c64906f59580b8be
git	www.git.kernel.org/stable/c/6256899c3a34674bba6076884aedbba49fc695e4
git	www.git.kernel.org/stable/c/648927ceb84021a25a0fbd5673740956f318d534
git	www.git.kernel.org/stable/c/7e706d50fa119eead6376bf0ef973e8d73a96030
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64368.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-64368

26 Jul 2026 05:17Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00209