Out-of-bounds read in Linux kernel - CVE-2026-64547
Published: July 28, 2026
Vulnerability identifier: #VU139822
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64547
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker with physical access to cause a denial of service.
The vulnerability exists due to an out-of-bounds read in net1080_rx_fixup() when processing a crafted short frame from a malicious NetChip 1080 device. An attacker with physical access can send a frame advertising a large even packet length to cause a denial of service.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-64547
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.100-1
linux (Debian package) - update to 6.12.100-1
External References
- https://git.kernel.org/stable/c/03f384bc0cb8d4a1301d4f5b0baef2d980258383
- https://git.kernel.org/stable/c/4dc8484be3302d187274364820d3bef6c62bde32
- https://git.kernel.org/stable/c/685e92934f11d5e215dad58813e2f9955ac2f436
- https://git.kernel.org/stable/c/b153cfe84b1340c69a13d0957665a2bfcf21239c
- https://git.kernel.org/stable/c/c087749815379e9af2fdbeb08bfc33870b103958
- https://git.kernel.org/stable/c/e4a87126c085b097d29e17e3b7647295bba8be7c
- https://git.kernel.org/stable/c/ea866cab12db1a2100b400a8b03569e5bc0ee29a
- https://git.kernel.org/stable/c/f42217fa7d535e9ec4151f7971f06f6ea65e850a