NULL pointer dereference in Linux kernel - CVE-2026-64545
Published: July 28, 2026
Vulnerability identifier: #VU139824
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64545
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a null pointer dereference in xdp_master_redirect() when processing XDP_TX on a bond slave during upper-master unlinking. A local user can trigger packet processing in this race window to cause a denial of service.
The issue can lead to a kernel panic when the receiving device no longer has an upper-master adjacency but is still treated as a bond slave.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-64545
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.100-1
linux (Debian package) - update to 6.12.100-1
External References
- https://git.kernel.org/stable/c/03b743586a2469744e96e9c1015096d07240935d
- https://git.kernel.org/stable/c/3876318ea54e83eb70982b8280a3c5e4e32269bf
- https://git.kernel.org/stable/c/4edbcacca09f92b85d3951b6add11894b20a84bc
- https://git.kernel.org/stable/c/89c103d702b25ceb2d097faf854deb47b53b17ff
- https://git.kernel.org/stable/c/c99ca049e910d61ddbd28cc2c47242f2bfbb4970
- https://git.kernel.org/stable/c/e2a56441233131fe18a76001de347ecda217e40c
- https://git.kernel.org/stable/c/e82d8cc4321c373dc46e741cd2dfdaa7921fddb7