CVE-2026-64009: linux kernel from 2.6.22 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

Affected technology

linux kernel · from 2.6.22 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · c5c2523893747f88a83376abad310c8ad13f7197 to before 8014f70c4e6e5ab101ae3860a614e65e988372e3, c5c2523893747f88a83376abad310c8ad13f7197 to before 1021d2877b689a648b27815c854557a917122e93, c5c2523893747f88a83376abad310c8ad13f7197 to before 2a41b1b31c61c52b972278ce1732a1443f5e89ed, c5c2523893747f88a83376abad310c8ad13f7197 to before fccd685b32df5aaf6bad4381eeda216468e283f0, c5c2523893747f88a83376abad310c8ad13f7197 to before 820e501be8aee4b365d218d83227b314309c5fda, c5c2523893747f88a83376abad310c8ad13f7197 to before 82ac903e0b519849647657b8c48d21237ada06a2, c5c2523893747f88a83376abad310c8ad13f7197 to before 3db50ceeacb52806d8fe86fb1dfe944df0b9f789, c5c2523893747f88a83376abad310c8ad13f7197 to before 742b04d0550b0ec89dcbc99537ec88653bd1ad90
Linux

Linux · 2.6.22
Linux

Component: Not specified by the source
File: net/xfrm/xfrm_state.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A nobody user can install an IPv4 ESP tunnel SA with a large authentication key (XFRMA_ALG_AUTH_TRUNC, e.g. hmac(sha512), 64-byte key, 64-byte trunc), configure a small interface MTU (68 bytes), and set XFRMA_TFCPAD to a large value. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.