CVE-2026-64580: Linux 3.10

Affected technology

Linux · 84c4a9dfbf430861e7588d95ae3ff61535dca351 to before 97e032e5733e49471fb73de117ea2ac1ac7c479a, 84c4a9dfbf430861e7588d95ae3ff61535dca351 to before df6856c2dda9187601d29b5fbd7a81b3b178cedf, 84c4a9dfbf430861e7588d95ae3ff61535dca351 to before 43de8a49335e611adb271bbd52e84dfbc11fc185, 84c4a9dfbf430861e7588d95ae3ff61535dca351 to before ff636d7b7cba6dea82ecf580415ea57f2c1a11b6, 84c4a9dfbf430861e7588d95ae3ff61535dca351 to before e078da1b4e11390cff3201c19a9a1fe70c5b934f, 84c4a9dfbf430861e7588d95ae3ff61535dca351 to before 136992de9bb91871084ae52d172610541c76e4d2, a7e22d0c0e81dde129a51ee413644124f4b59954, 01b0d887f67a388fb2a658ee2bdd74e5ba146818, a98124aac0b5adc5de8ae54f11322781cb4d85c3, e27b7bee743d921f037b1da6f071237345bef7c1, 3.0.79 to before 3.1, 3.2.46 to before 3.3, 3.4.46 to before 3.5, 3.9.3 to before 3.10
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: net/ipv6/xfrm6_policy.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.