CVE-2026-64318
kernel: partitions: aix: bound the pp_count scan to the ppe array
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's AIX partition handling. A local attacker can provide a specially crafted AIX/IBM partition table on a block device. When the kernel scans this device, the aix_partition() function reads an unvalidated pp_count value, causing it to read beyond the allocated buffer. This out-of-bounds read can lead to information disclosure, potentially revealing sensitive kernel memory, and may also result in a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-125 · Out-of-bounds Read