CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-64384: linux kernel 6.8; +1 more affected products

CVE-2026-64384. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00457 (percentile 0.38148), scored 15-Oct-2026.

Affected technology

linux kernel · from 6.6.32 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.12.96 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

linux kernel · 6.8
linux

linux kernel · 6.8 · update rc2
linux

linux kernel · 6.8 · update rc3
linux

linux kernel · 6.8 · update rc4
linux

linux kernel · 6.8 · update rc5
linux

linux kernel · 6.8 · update rc6
linux

linux kernel · 6.8 · update rc7
linux

Linux · 433042a91f9373241307725b52de573933ffedbf to before 5821f9dbb8b5b24391850a13418e633edd0fb003, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before d684f4134998085702009b94c35c2003fc9e72d3, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 52af1975f0dfae990c5a0e85872cc41be0e88a68, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 901891513951bc8322ece754863909ea45af95c6, 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 145f820dcbb2cced374f2532f8a61a44dce4a615, 6.6.32 to before 6.6.145
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: fs/smb/client/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-415
CCR priority
39.3 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00457 · percentile 0.38148 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64384.html