Answer in brief
CVE-2026-64297 records a Medium severity (CVSS 5.5) vulnerability in module: decompress: check return value of module_extend_max_pages(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <e7f174715f9f0cbcb9e87b52e4fc4ef149baac98 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <afcc0515bbdd28d509a2b5870faaa89b137f5d53 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <168072baf9ad516d5a06046514c7fea4c0671990 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <a82e170637e050a803b4f37542371ef216bf66d2 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <e7da02659c229f73492fb1ed87ceda4090153aaa || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <786d2d84416a9a1c1a47b71a68d679d886284be2 | e7f174715f9f0cbcb9e87b52e4fc4ef149baac98, afcc0515bbdd28d509a2b5870faaa89b137f5d53, 168072baf9ad516d5a06046514c7fea4c0671990, a82e170637e050a803b4f37542371ef216bf66d2, e7da02659c229f73492fb1ed87ceda4090153aaa, 786d2d84416a9a1c1a47b71a68d679d886284be2 |
| Linux/Linuxgeneric | 5.17 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 12, 2026
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc() internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails, info->pages remains NULL and info->max_pages remains 0. Subsequent calls to module_get_next_page() will attempt to dynamically grow the array by calling module_extend_max_pages(info, 0) since info->used_pages is 0. This results in kvrealloc(NULL, 0) returning ZERO_SIZE_PTR, which is treated as a success, leading to a dereference of ZERO_SIZE_PTR and a kernel oops. Fix: add the missing error check after module_extend_max_pages() and return immediately on failure. This matches the pattern used by every other kvrealloc() caller in the module loading path. [Sami: Corrected the analysis in the commit message.]
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-64297 records a Medium severity (CVSS 5.5) vulnerability in module: decompress: check return value of module_extend_max_pages(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <e7f174715f9f0cbcb9e87b52e4fc4ef149baac98 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <afcc0515bbdd28d509a2b5870faaa89b137f5d53 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <168072baf9ad516d5a06046514c7fea4c0671990 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <a82e170637e050a803b4f37542371ef216bf66d2 || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <e7da02659c229f73492fb1ed87ceda4090153aaa || >=b1ae6dc41eaaa98bb75671e0f3665bfda248c3e7 <786d2d84416a9a1c1a47b71a68d679d886284be2 | e7f174715f9f0cbcb9e87b52e4fc4ef149baac98, afcc0515bbdd28d509a2b5870faaa89b137f5d53, 168072baf9ad516d5a06046514c7fea4c0671990, a82e170637e050a803b4f37542371ef216bf66d2, e7da02659c229f73492fb1ed87ceda4090153aaa, 786d2d84416a9a1c1a47b71a68d679d886284be2 |
| Linux/Linuxgeneric | 5.17 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 12, 2026
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_extend_max_pages() module_extend_max_pages() calls kvrealloc() internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails, info->pages remains NULL and info->max_pages remains 0. Subsequent calls to module_get_next_page() will attempt to dynamically grow the array by calling module_extend_max_pages(info, 0) since info->used_pages is 0. This results in kvrealloc(NULL, 0) returning ZERO_SIZE_PTR, which is treated as a success, leading to a dereference of ZERO_SIZE_PTR and a kernel oops. Fix: add the missing error check after module_extend_max_pages() and return immediately on failure. This matches the pattern used by every other kvrealloc() caller in the module loading path. [Sami: Corrected the analysis in the commit message.]
Quoted source text, attributed separately from HOL analysis.