CVE-2026-64297

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the decompression module where the return value of the module extend max pages() function is not checked. This function internally calls kvrealloc() and returns -ENOMEM upon allocation failure. If the initial allocation fails, info->pages remains NULL and info->max pages remains 0. Subsequent calls to module get next page() then attempt to grow the array by calling module extend max pages(info, 0), which results in kvrealloc(NULL, 0) returning a ZERO SIZE PTR. Because this is treated as a success, it leads to a dereference of the ZERO SIZE PTR and causes a kernel oops.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.