P4Verified

CVE-2026-64423: linux kernel from 3.11 (inclusive), before 5.10.261 (exclusive), from 5.11 (inclusive), before 5.15.212 (exclusive)…

CVE-2026-64423. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00128 (percentile 0.0216), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.11 (inclusive), before 5.10.261 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.212 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.178 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.96 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

linux kernel · 7.2 · update rc1
linux

linux kernel · 7.2 · update rc2
linux

Linux · e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before 412ba7def06ffe974ba9a1d862b022362c54ffa5, e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before c6cb5f8ebe1c1a78710c19f102db9fe48b9e6ba9, e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before 5f42729d74bd6c61306d864423290d92962de4e1, e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before 76d030ac95e17f91d69a595f17ebc5979700cf9a, e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before 8820b530cb2388503d7418228d03ba074bf7a03e, e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before 2ca18df1c2611f70eb3eb487e02ae85eb703b284, e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before f91883031e5a62877a29ce139442973cbea769f1, e9897071350bd9d94a56b5b6f79c85b1a98fc7e7 to before 7993211bde166471dffac074dc965489f86531f8
Linux

Linux · 3.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/igmp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-416
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00128 · percentile 0.0216 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64423.html