CVE-2026-64544

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the pefile digest pe contents() function. The issue occurs when calculating the trailing-data hash length using the formula pelen - (hashed bytes + certs size). A specially crafted Portable Executable (PE) file can cause the addition of hashed bytes and certs size to exceed pelen, leading to an unsigned subtraction underflow. This results in a value of approximately 4 GiB being passed to the crypto shash update() function, which then reads out of bounds and triggers a kernel panic on unmapped vmalloc guard pages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.