Get real-time updates on Telegram
CVE-2026-64102: linux kernel from 5.3 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…
CVE-2026-64102. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.005 (percentile 0.41394), scored 15-Oct-2026.
Affected technology
linux kernel · from 5.3 (inclusive), before 5.10.258 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.142 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.92 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.34 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.11 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
linux kernel · 7.1 · update rc4
linux
Linux · 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 683f7cfbf514193d63c0efa079f3352bde84c2e0, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 4a331582011d9e8089af8aa2a61ec6b4443bb245, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 33a8b5e971e294ec2a7b74211c545e09efd8e9ac, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 14553be882d9ce91749c9d64041de66e34ad8e70, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before c7c0c0f4379dedec12d24dbb9dded5d2db7fd9f2, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 1012896f4225e8f801ff3c1648023845b66dfb11, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 775b4dc9618a99a1fa48b57554041a5dc17e1336, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 0ce1bc9e46ecabe84772bb561e373c0d9876d6f2
Linux
Linux · 5.3
Linux
Component: Not specified by the source
File: drivers/infiniband/sw/siw/siw_qp_rx.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.005 · percentile 0.41394 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-64102.html