CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-64383: linux kernel 6.8; +1 more affected products

CVE-2026-64383. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00457 (percentile 0.38146), scored 15-Oct-2026.

Affected technology

linux kernel · from 6.6.32 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.12.96 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

linux kernel · 6.8
linux

linux kernel · 6.8 · update rc2
linux

linux kernel · 6.8 · update rc3
linux

linux kernel · 6.8 · update rc4
linux

linux kernel · 6.8 · update rc5
linux

linux kernel · 6.8 · update rc6
linux

linux kernel · 6.8 · update rc7
linux

Linux · 433042a91f9373241307725b52de573933ffedbf to before 6e27f40b682a5e42a2daae3ce6d96f0e0e16dedb, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 878757163eea684750107a31ea134c103863515d, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 3407240cde132a4b72d6429a2625a09a2f78adaf, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 013a9a3da46c5dabcf18f65ea6a47874ba12a15d, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 4be31c943a3a27a5a0251dbb8f5cb89059ec3d5a, 6.6.32 to before 6.6.145
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: fs/smb/client/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-415
CCR priority
39.3 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00457 · percentile 0.38146 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64383.html