Use-after-free in Linux kernel - CVE-2026-64115
Published: July 20, 2026
Vulnerability identifier: #VU138531
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2026-64115
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to a use-after-free in vmci_transport_recv_connecting_server() and vmci_transport_recv_listen() when processing a peer reset during the connection handshake. A remote attacker can send a reset packet during the handshake to cause a denial of service.
The issue is triggered by a race involving pending socket cleanup in the VMCI vsock transport.
How to mitigate CVE-2026-64115
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/1dd531e28f61edd286edc486ab068f135b5ae1eb
- https://git.kernel.org/stable/c/1e19f08552b90070ed18bafb1763c78297823af6
- https://git.kernel.org/stable/c/440447699c681e26ed58e9c309cad718270a18b4
- https://git.kernel.org/stable/c/47e63077605c6c2aa45b3df9847a8cdc1f1f6ef9
- https://git.kernel.org/stable/c/99e22ddf4edb63dc8382bc028af928056d3450cf
- https://git.kernel.org/stable/c/9fe74e42914c851d68069713b7b917a9c33faf26
- https://git.kernel.org/stable/c/cc27e989a5dfdfcfc1cca7c3be27a0c7532b46cb
- https://git.kernel.org/stable/c/ecda37f8faab3220da199335e42564cb7a9ad145