CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-64032: linux kernel from 5.15.186 (inclusive), before 5.15.209 (exclusive), from 6.1.142 (inclusive), before 6.1.175…

CVE-2026-64032. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00171 (percentile 0.05923), scored 12-Oct-2026.

Affected technology

linux kernel · from 5.15.186 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 6.1.142 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.6.95 (inclusive), before 6.6.142 (exclusive)
linux

linux kernel · from 6.12.35 (inclusive), before 6.12.92 (exclusive)
linux

linux kernel · from 6.15.4 (inclusive), before 6.18.34 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

Linux · 410a033bfa8c7daefbae0225c836693db2149ec1 to before ddefd1b8e5eb58933a697ab38334f0fd82e7fb8b, c6d16eab122744df698f18b47cf771945cd55066 to before ed3b69e60385a03df11c6d12e5d7bdf0f4a11b70, b4c83b37490d61cfdd62a2b29e98a9b89004b5c0 to before 1900ca8acb92fbea8bf9abef9927c7fed03db7fc, 78f768e36c065ca3f88272fcf39014782c2d4ecd to before ebe5561154c823b323bd06e350b55e0b8604d851, 4b30ae9adb047dd0a7982975ec3933c529537026 to before a9224862d597d0eed0a34bbb27343f703fc4113f, 4b30ae9adb047dd0a7982975ec3933c529537026 to before 7213256c91ed778a0997c2029c152b18dc50e4fd, 4b30ae9adb047dd0a7982975ec3933c529537026 to before 4df78ff02629c7729168f0696a7a2123c389818d, c996e25df0b3282c724bb5aca434518bc08cd963, 5.15.186 to before 5.15.209, 6.1.142 to before 6.1.175, 6.6.95 to before 6.6.142, 6.12.35 to before 6.12.92, 6.15.4 to before 6.16
Linux

Linux · 6.16
Linux

Component: Not specified by the source
File: net/bridge/br_multicast.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00171 · percentile 0.05923 · 2026-10-12
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64032.html