CVE-2026-64256

Published: Jul 25, 2026Modified: Aug 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that q_id is an unsigned 32-bit variable. If it happens to be set to XFS_DQ_ID_MAX due to a filesystem that actually has a dquot for ID_MAX, then this addition will truncate to zero and the iteration starts over. Fix this by casting to u64.

Affected (6)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 6.13 to 6.18.39
Linux Linux Kernel	From 6.19 to 7.1.4
Linux Linux Kernel	From 6.8 to 6.12.96
Linux Linux Kernel	Version 7.2 rc1
Linux Linux Kernel	Version 7.2 rc2
Linux Linux Kernel	Version 7.2 rc3

References (4)

https://git.kernel.org/stable/c/249e311c2ba392ceaf9ebfc145a46922946f069a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/2b14fe1e0924c6b901f4256456342569c5397abe

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/d1c4c40599c376aeb0c93068a2ae344e79ee4b90

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/d766e4e5e85d829629c3ba503802fe1303d7b591

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.