Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64318

In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the pp_count scan to the ppe array aix_partition() reads the physical volume descriptor into a fixed-size struct pvd and then scans its physical-partition-extent array: int numpps = be16_to_cpu(pvd->pp_count); ... for (i = 0; i < numpps; i += 1) { struct ppe *p = pvd->ppe + i; ... lp_ix = be16_to_cpu(p->lp_ix); pvd points at a single kmalloc()'d struct pvd whose ppe[] member holds a fixed ARRA
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d95097fa1ff1048b8f05d7d95c77107feba723c6d32aba84ce4a6a87664ec39b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["block/partitions/aix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.11"},{"lessThan":"3.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessTh…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["block/partitions/aix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"09861651617ba0fec089e8b9477439e68398c110","status":"affected","version":"6ceea22bbbc84fcf6bf0913bb3db8a657e9002f6","versionType":"git"},{"lessThan":"5eacdb1967378f5e5591cd27a2d8cdee2df1a599","status":"affected","version":"6ceea22bbbc84fcf6bf0913bb3db8a657e9002f6","versionType":"git"},{"lessThan":"b5e9c09309e18fd9839ad007c238120353ca0cc4","status":"affected","version":"6ceea22bbbc84fcf6bf0913…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["block/partitions/aix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.11"},{"lessThan":"3.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessTh…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["block/partitions/aix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"09861651617ba0fec089e8b9477439e68398c110","status":"affected","version":"6ceea22bbbc84fcf6bf0913bb3db8a657e9002f6","versionType":"git"},{"lessThan":"5eacdb1967378f5e5591cd27a2d8cdee2df1a599","status":"affected","version":"6ceea22bbbc84fcf6bf0913bb3db8a657e9002f6","versionType":"git"},{"lessThan":"b5e9c09309e18fd9839ad007c238120353ca0cc4","status":"affected","version":"6ceea22bbbc84fcf6bf0913…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/09861651617ba0fec089e8b9477439e68398c110"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/2dc0bfd2fe355fb930de63c2f2eb8ced8570c579"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/44f37ee92fdcd377c41bdf6a31cdd8cc7d4c410e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/4671bb74bba05fdd4acf670a35758c29e8c97b83"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/5eacdb1967378f5e5591cd27a2d8cdee2df1a599"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/b5e9c09309e18fd9839ad007c238120353ca0cc4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/ce93228e2193a17d2c58b656e439bb39fe5c3af8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/fd94a779020f2ecc8b2607f4c20b34acb1763b9a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7db6882d1e76934255b7a65078bdd691043e2acc7bc50c99c8a52c658660ea95 · sha256:893a61e503119651… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer