Search: CVE-2026-72217

A vulnerability in the Linux kernel's SUNRPC subsystem involving the xdr_buf_to_bvec() function allows an out-of-bounds write due to improper bounds checking before storing data. This can cause a write beyond the allocated array, potentially corrupting adjacent memory with client-supplied data. The issue affects specific Linux kernel versions and has been addressed by moving the bounds check ahead of the store operations. The vulnerability has a high CVSS score of 9.8, indicating critical impact on confidentiality, integrity, and availability.