vulnti.work

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc() internally and re…

中危 CVSS 5.5
CVECVE-2026-64297
首次发现2026-08-12 15:15 UTC
披露时间2026-07-25 10:17 UTC
最后更新2026-08-12 15:15 UTC
通道状态auto

摘要

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc() internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails, info->pages remains NULL and info->max_pages remains 0. Subsequent calls to module_get_next_page() will attempt to dynamically grow the array by calling module_extend_max_pages(info, 0) since in…

中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。

深度研判

该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。

受影响产品

  • :

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD