CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-64306: linux kernel from 3.12.44 (inclusive), before 3.13 (exclusive), from 4.1 (inclusive), before 5.10.261 (exclusive)…

CVE-2026-64306. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0016 (percentile 0.0479), scored 22-Oct-2026.

Affected technology

linux kernel · from 3.12.44 (inclusive), before 3.13 (exclusive)
linux

linux kernel · from 4.1 (inclusive), before 5.10.261 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.212 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.178 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.96 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

Linux · cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before 074db6db03a0aaa78f05ca9d4838053713796665, cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before 7b03312491f9fe6ba4d60c4023e7e61d2d1fed96, cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before 75597e8774f319152744d24e0683d9393540a951, cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before cc42fb40171c249bb859071d81b4eb007398a0bc, cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before bbbac12083eff489b35d848332f0dff311131344, cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before 23b8b188cb32e5531d0f8d3af9506f8959cb369e, cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before a9e886f73dd717027028bb7e3bbca93601ecdfc7, cde001e4c3c3625c60b68a83eb1f1c2572dee07a to before 39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b, f60b0fa8bbddde66f1d197be07120264b555c84a, 3.12.44 to before 3.13
Linux

Linux · 4.1
Linux

Component: Not specified by the source
File: crypto/drbg.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.0016 · percentile 0.04785 · 2026-10-24
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64306.html