01 Record

CVE-2026-64296

exfat: bound uniname advance in exfat_find_dir_entry()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

exfat: bound uniname advance in exfat_find_dir_entry()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.16% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 6.2% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-10-19.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-25 08:49Z3 MO AGO

Last updated

2026-10-19 20:38Z9 DAYS AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787Out-of-bounds WriteBase
CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

6e44cac29c34998c67c9af108625fd505ab6dd38bb43749a65052007984405d5

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxca06197382bde0a3bc20215595d1c9ce20c6e341 to < 72a2589d82eb001c94b74bcfe6f9a599bd9bef60, ca06197382bde0a3bc20215595d1c9ce20c6e341 to < fae76a94b35ee8c0e2eb6f64caca01d75c6d34e4, ca06197382bde0a3bc20215595d1c9ce20c6e341 to < cf85180b8a015029ee147694eaf4e0b3537e9432, ca06197382bde0a3bc20215595d1c9ce20c6e341 to < ce4736c1e6c4cfbf1ac409a8c328a0b69546c9a0, ca06197382bde0a3bc20215595d1c9ce20c6e341 to < 727bf7783a2936ffd55c628dddfd69343e511dcf, ca06197382bde0a3bc20215595d1c9ce20c6e341 to < 33c0b96d7e1672be1de0053786637ea46fb81507, ca06197382bde0a3bc20215595d1c9ce20c6e341 to < c8e041c68c0bbb73aa62371ee63947bb6949d8b2, ca06197382bde0a3bc20215595d1c9ce20c6e341 to < 3a1230e7b043c62737b05a3e9275ca83a43ad20a, 5.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/72a2589d82eb001c94b74bcfe6f9a599bd9bef60
git.kernel.orghttps://git.kernel.org/stable/c/fae76a94b35ee8c0e2eb6f64caca01d75c6d34e4
git.kernel.orghttps://git.kernel.org/stable/c/cf85180b8a015029ee147694eaf4e0b3537e9432
git.kernel.orghttps://git.kernel.org/stable/c/ce4736c1e6c4cfbf1ac409a8c328a0b69546c9a0
git.kernel.orghttps://git.kernel.org/stable/c/727bf7783a2936ffd55c628dddfd69343e511dcf
git.kernel.orghttps://git.kernel.org/stable/c/33c0b96d7e1672be1de0053786637ea46fb81507
git.kernel.orghttps://git.kernel.org/stable/c/c8e041c68c0bbb73aa62371ee63947bb6949d8b2
git.kernel.orghttps://git.kernel.org/stable/c/3a1230e7b043c62737b05a3e9275ca83a43ad20a

07 Fixed in

Debian 12

linux
Fixed in 6.1.180-1
linux-6.12
Fixed in 6.12.100-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.96-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.