P4Verified

CVE-2026-64010: linux kernel from 3.6 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-64010. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00255 (percentile 0.15769), scored 12-Oct-2026.

Affected technology

linux kernel · from 3.6 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · a69f32af86e389dd232b1bb2269e202c1bfcc60f to before dce85215a6c7b0fd753f577a4c487f647119884c, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before bd08bb7443c501d2f2a71d529e4afcf11c9b07d2, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before 0b45c31746e1523d5d482fda8fcf54a35ac417f1, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before ee2d1a8a1833c5e56e9a1745e64b0b4edda732c2, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before ad8a27d63cac96bac441edd002209ebd996e12fb, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before 650bdd8fdfab64a09ee474150313dbc48c374795, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before b2a60f7f846faaf5c2cdad4ea6d3a33e5f863183, a69f32af86e389dd232b1bb2269e202c1bfcc60f to before b493ea2765cc17cb8aa7e7544a4b6dcb05b6ed77
Linux

Linux · 3.6
Linux

Component: Not specified by the source
File: net/nfc/llcp_core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

A attacker could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

Published 13-Oct-2026 14:25 UTC

CWE: CWE-362, CWE-416
CCR priority: 35.3 /100 (P4)
CVSS 3.1: 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00255 · percentile 0.15769 · 2026-10-12
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-13 16:07:08.474774+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-13 14:24:58.546597+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64010.html