CVE Explorer

CVE-2026-64297

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc() internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails, info->pages remains NULL and info->max_pages remains 0. Subsequent calls to module_get_next_page() will attempt to dynamically grow the array by calling module_extend_max_pages(info, 0) since inf

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4d45cb9ce775b4a99ce80ba9559b864c0a91e71643c9c6bf109b3bba557aa161

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/module/decompress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.17"},{"lessThan":"5.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessT…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/module/decompress.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e7f174715f9f0cbcb9e87b52e4fc4ef149baac98","status":"affected","version":"b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7","versionType":"git"},{"lessThan":"afcc0515bbdd28d509a2b5870faaa89b137f5d53","status":"affected","version":"b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7","versionType":"git"},{"lessThan":"168072baf9ad516d5a06046514c7fea4c0671990","status":"affected","version":"b1ae6dc41eaaa98bb75…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/affected/0

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/168072baf9ad516d5a06046514c7fea4c0671990"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/786d2d84416a9a1c1a47b71a68d679d886284be2"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/a82e170637e050a803b4f37542371ef216bf66d2"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/afcc0515bbdd28d509a2b5870faaa89b137f5d53"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/e7da02659c229f73492fb1ed87ceda4090153aaa"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/e7f174715f9f0cbcb9e87b52e4fc4ef149baac98"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:daf3a6d3c50814afce27edaf3a6c42cbb32e37f14c82e9c34a792ab6e8157800 · sha256:53349d3416790eba… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer