CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-64026: linux kernel 5.3; +1 more affected products

CVE-2026-64026. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00175 (percentile 0.06432), scored 12-Oct-2026.

Affected technology

linux kernel · from 5.3.1 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 5.3
linux

linux kernel · 5.3 · update rc7
linux

linux kernel · 5.3 · update rc8
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · d0d5c0cd1e711c98703f3544c1e6fc1372898de5 to before a05bf6d9e621fa71e89ccebe3047ba45218d7b38, d0d5c0cd1e711c98703f3544c1e6fc1372898de5 to before b94a6ccbaf1104dd980150a65fdeb2f69d17d2f5, d0d5c0cd1e711c98703f3544c1e6fc1372898de5 to before 46cb765e2e5ad52303ea157e10d370bb6b7acbbf, d0d5c0cd1e711c98703f3544c1e6fc1372898de5 to before c580087743712112778a06d65a4074053072d7bf, d0d5c0cd1e711c98703f3544c1e6fc1372898de5 to before d2bc90cf6c75cb96d2ce549be6c35efa3099d25b
Linux

Linux · 5.3
Linux

Component: Not specified by the source
File: net/rxrpc/ar-internal.h, net/rxrpc/call_event.c, net/rxrpc/call_object.c, net/rxrpc/insecure.c, net/rxrpc/recvmsg.c, net/rxrpc/rxgk.c, net/rxrpc/rxgk_common.h, net/rxrpc/rxkad.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00175 · percentile 0.06432 · 2026-10-12
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64026.html