Vulnerability in Linux

CVE-2026-64319

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmet_auth_reply() accesses the variable-length rval[] array using attacker-controlled hl (hash…

Affected products

  • Linux — versions db1312dd95488b5e6ff362ff66fcf953a46b1821, 6.0, 0

References