Get real-time updates on Telegram
CVE-2026-64007: linux kernel from 3.12 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…
CVE-2026-64007. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00514 (percentile 0.42091), scored 12-Oct-2026.
Affected technology
linux kernel · from 3.12 (inclusive), before 5.10.259 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
linux kernel · 7.1 · update rc4
linux
linux kernel · 7.1 · update rc5
linux
Linux · 48b1de4c110a7afa4b85862f6c75af817db26fad to before 9902a1058992de5d95656b64a3bd95c077f7ba2c, 48b1de4c110a7afa4b85862f6c75af817db26fad to before d3019c61799adc21811af4b521f11f3dc77f8e04, 48b1de4c110a7afa4b85862f6c75af817db26fad to before dd206819f210522579010d889d45a9530bb494bc, 48b1de4c110a7afa4b85862f6c75af817db26fad to before af2c22ccb1f621aff487ff47a040e38e058541e7, 48b1de4c110a7afa4b85862f6c75af817db26fad to before c7f945f7da097245a2f8ed7775ce48421047ee96, 48b1de4c110a7afa4b85862f6c75af817db26fad to before f0fea2b6d5453a11ad11713bbf37561b9b3a7edf, 48b1de4c110a7afa4b85862f6c75af817db26fad to before a91887a5b6ee4b98dfbf1db657ed2b879430149e, 48b1de4c110a7afa4b85862f6c75af817db26fad to before 92170e6afe927ab2792a3f71902845789c8e31b1
Linux
Linux · 3.12
Linux
Component: Not specified by the source
Function: calls
File: net/netfilter/nf_synproxy_core.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00514 · percentile 0.42091 · 2026-10-12
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-13 16:07:08.474774+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-13 14:24:58.546597+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-64007.html