Get real-time updates on Telegram
CVE-2026-64032: linux kernel from 5.15.186 (inclusive), before 5.15.209 (exclusive), from 6.1.142 (inclusive), before 6.1.175…
CVE-2026-64032. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00171 (percentile 0.05923), scored 12-Oct-2026.
Affected technology
linux kernel · from 5.15.186 (inclusive), before 5.15.209 (exclusive)
linux
linux kernel · from 6.1.142 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.6.95 (inclusive), before 6.6.142 (exclusive)
linux
linux kernel · from 6.12.35 (inclusive), before 6.12.92 (exclusive)
linux
linux kernel · from 6.15.4 (inclusive), before 6.18.34 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
linux kernel · 7.1 · update rc4
linux
Linux · 410a033bfa8c7daefbae0225c836693db2149ec1 to before ddefd1b8e5eb58933a697ab38334f0fd82e7fb8b, c6d16eab122744df698f18b47cf771945cd55066 to before ed3b69e60385a03df11c6d12e5d7bdf0f4a11b70, b4c83b37490d61cfdd62a2b29e98a9b89004b5c0 to before 1900ca8acb92fbea8bf9abef9927c7fed03db7fc, 78f768e36c065ca3f88272fcf39014782c2d4ecd to before ebe5561154c823b323bd06e350b55e0b8604d851, 4b30ae9adb047dd0a7982975ec3933c529537026 to before a9224862d597d0eed0a34bbb27343f703fc4113f, 4b30ae9adb047dd0a7982975ec3933c529537026 to before 7213256c91ed778a0997c2029c152b18dc50e4fd, 4b30ae9adb047dd0a7982975ec3933c529537026 to before 4df78ff02629c7729168f0696a7a2123c389818d, c996e25df0b3282c724bb5aca434518bc08cd963, 5.15.186 to before 5.15.209, 6.1.142 to before 6.1.175, 6.6.95 to before 6.6.142, 6.12.35 to before 6.12.92, 6.15.4 to before 6.16
Linux
Linux · 6.16
Linux
Component: Not specified by the source
File: net/bridge/br_multicast.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00171 · percentile 0.05923 · 2026-10-12
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-13 15:47:46.846446+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-64032.html