SUSE CVE-2026-64567

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...

CVE-2026-64567

The CVE-2026-64567 vulnerability affects the Linux kernel’s btrfs free-space-cache loading. The issue stems from loading a v1 free-space cache where num_entries can exceed the available pages, allowing io_ctl_check_crc to advance past the end of the pages[] array. This leads to a slab-out-of-boun...