Get real-time updates on Telegram
CVE-2026-64582: Linux 4.8
CVE-2026-64582. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.0013 (percentile 0.02299), scored 15-Oct-2026.
Affected technology
Linux · 8700e3e7c4857d28ebaa824509934556da0b3e76 to before b810352d0916796dabe633cdb9adee9863ab4911, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before aef5ea8578f97f2701039600846a8bcf5f21e863, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 3371f2036e0f970166bbb624e25bba46d32fa18e, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 665fb7d22a700c66a78db0cf88c6e6a649aba9d0, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before e038d42cc09ca1da9d3568ce8ae062b2bfb3bc0e, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before e59a6aa89e0fcd1d0707832eb4654fd9ae7d31e6, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 3525987a392536f31a484833af258971af63b24c, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 35744ab3d03c5fca8c1752f53fc8fc674e14c561
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: drivers/infiniband/sw/rxe/rxe_mmap.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The attacker can get a clean page-level UAF. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0013 · percentile 0.02299 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-64582.html