Linux CVE-2026-64217

We need to output a JSON object with the specified fields. Let's synthesize data.

First, CVE ID: CVE-2026-64217. Description: "In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get included in the iterator constructed at the end of the function. If there was an overfill, memory corruption has already happened."

Given data: CVSS: 7.8, vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H EPSS 0.17%, percentile 6% Patch: Available from vendor Reported by: Linux CPE: cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* (multiple, all same pattern) Tags: Buffer Overflow, Linux ENISA EUVD ID: EUVD-2026-48625 Affected versions (EUVD): "Linux patch: 7.0.11", "Linux patch: 7.1", "Linux 85dd2c8ff368b1446be9febde84afe1d7aec4261 <afeb32d9bf9aaeea51d0f723a19f14afb73bd94d", "Linux 6.3", "Linux 85dd2c8ff368b1446be9febde84afe1d7aec4261 <00efe58bbdcc93272d579ca24bfc912563f4a204", "Linux 85dd2c8ff368b1446be9febde84afe1d7aec4261 <0ef37eef83fad3542ee06db2940433ae1a92b39d", "Linux patch: 6.6.142", "Linux patch: 0", "Linux patch: 6.12.92", "Linux 85dd2c8ff368b1446be9febde84afe1d7aec4261 <f48b9157f0f611fa436c360648603d5ded719b12", "Linux 85dd2c8ff368b1446be9febde84afe1d7aec4261 <96cc3beb2390ba9f9c128c5733c0ccfe450dd4f9", "Linux patch: 6.18.34".

These version strings are messy. The vulnerability is in the Linux kernel's netfs subsystem, specifically netfs_extract_user_iter() function. The issue: iov_iter_extract_pages() can overfill the pages array, leading to memory corruption. The fix ensures that if overfill occurs, those pages aren't included in the iterator. So it's a bounds checking / buffer overflow type issue. The tags include Buffer Overflow.

The CVSS vector: AV:L, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H. So local attack, low privileges required, no user interaction, high impact on confidentiality, integrity, availability. Scor