CVE-2026-64217

The CVE concerns the Linux kernel’s netfs code: a fix in netfs_extract_user_iter() addresses an overrun in iov_iter_extract_pages() where pages[] could be overfilled, causing the final iterator to include pages that should not be present. If an overfill occurred, memory corruption may have alread...