CVE-2026-74671

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the xattr verify() function. The issue occurs because the digest-length check mixes int and size t types. Since sizeof() returns size t, the left-hand side of the comparison is promoted to an unsigned 64-bit integer. In cases of a truncated xattr, this leads to an integer underflow instead of a negative result, causing the check to pass incorrectly. Consequently, the memcmp() function reads bytes beyond the end of the buffer allocated by vfs getxattr alloc().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.