CVE-2026-64296

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the exfat file system implementation where the exfat find dir entry() function fails to properly bound the advance of the uniname pointer. When processing TYPE EXTEND entries, the output pointer increases by a fixed amount while the loop guard only monitors the accumulated name length. If a crafted directory contains many short name fragments (e.g., those containing an early NUL), the uniname pointer can exceed the p uniname->name buffer, leading to an out-of-bounds read and write at *(uniname+len).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.