CVE-2026-64317

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the isofs component when handling Rock Ridge symbolic link (SL) records. The functions get symlink chunk() and parse rock ridge inode internal() process variable-length components of an SL record without verifying if the component's declared length exceeds the actual record boundaries. A specially crafted SL record can trigger an out-of-bounds read of up to 255 bytes. If the record is located at the end of its backing buffer, this can lead to the disclosure of adjacent kernel memory to user space via the readlink() system call. This issue is particularly critical as ISO 9660 images from untrusted removable media are often auto-mounted by desktop environments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.