Improper input validation in Linux kernel - CVE-2026-64046
Published: July 20, 2026
Vulnerability identifier: #VU138607
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-64046
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper input validation in the net/tls plaintext scatter-gather list handling when processing TLS 1.3 records with a plain text scatter-gather list that wraps and has end = 0. A local user can trigger a chain-after-chain scatterlist layout to cause a denial of service.
The issue affects the case where the wrapping slot is reused for chaining to the content type entry, creating illegal input for the crypto subsystem.
How to mitigate CVE-2026-64046
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/410351158dfef2d67fea6603680b3a6013c6ed9d
- https://git.kernel.org/stable/c/49a5faaa471ddcd37b6893970c9916eb836e7c31
- https://git.kernel.org/stable/c/91359966e247c0244c66d50bbb8e74aefa4321c3
- https://git.kernel.org/stable/c/929b1548e63ac72e104c07d8ee8cbbeeba2fa89a
- https://git.kernel.org/stable/c/acdc12b71c9aa4be5dcd2c8062753c6d2033e235
- https://git.kernel.org/stable/c/af855f4c966afafef74faf8390c7b86568c0d46d
- https://git.kernel.org/stable/c/b9c015ef1a7bf1e8dc67f21c6381f36deb2c3a36
- https://git.kernel.org/stable/c/ff26a0e8377dec07e4a7230db7675bed1b9a6d03