CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-64007: linux kernel from 3.12 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-64007. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00514 (percentile 0.42091), scored 12-Oct-2026.

Affected technology

linux kernel · from 3.12 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 48b1de4c110a7afa4b85862f6c75af817db26fad to before 9902a1058992de5d95656b64a3bd95c077f7ba2c, 48b1de4c110a7afa4b85862f6c75af817db26fad to before d3019c61799adc21811af4b521f11f3dc77f8e04, 48b1de4c110a7afa4b85862f6c75af817db26fad to before dd206819f210522579010d889d45a9530bb494bc, 48b1de4c110a7afa4b85862f6c75af817db26fad to before af2c22ccb1f621aff487ff47a040e38e058541e7, 48b1de4c110a7afa4b85862f6c75af817db26fad to before c7f945f7da097245a2f8ed7775ce48421047ee96, 48b1de4c110a7afa4b85862f6c75af817db26fad to before f0fea2b6d5453a11ad11713bbf37561b9b3a7edf, 48b1de4c110a7afa4b85862f6c75af817db26fad to before a91887a5b6ee4b98dfbf1db657ed2b879430149e, 48b1de4c110a7afa4b85862f6c75af817db26fad to before 92170e6afe927ab2792a3f71902845789c8e31b1
Linux

Linux · 3.12
Linux

Component: Not specified by the source
Function: calls
File: net/netfilter/nf_synproxy_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
39.3 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00514 · percentile 0.42091 · 2026-10-12
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64007.html