Use-after-free in Linux kernel - CVE-2026-64564

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU140938

Use-after-free in Linux kernel - CVE-2026-64564

Published: August 4, 2026


Vulnerability identifier: #VU140938
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64564
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to a use-after-free in sctp_process_asconf_param() when processing crafted SCTP ASCONF DEL-IP parameters. A remote attacker can send a specially crafted SCTP ASCONF message to cause a denial of service.

The issue can occur when a single ASCONF carries DEL-IP parameters that free the cached transport and a later wildcard DEL-IP reuses the dangling transport pointer.


Affected software

Linux kernel
Debian Linux
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME
SUSE Linux Enterprise Server 11
openEuler
kernel-default-devel-debuginfo
kernel-xen-base
kernel-ec2-base
kernel-xen-devel-debuginfo
kernel-default-debuginfo
kernel-trace-devel
kernel-default-base
kernel-xen-devel
kernel-trace-debugsource
kernel-ec2-devel
kernel-default-devel
kernel-trace-debuginfo
kernel-xen-debuginfo
kernel-source
kernel-trace-devel-debuginfo
kernel-ec2-debuginfo
kernel-syms
kernel-ec2
kernel-trace
kernel-default
kernel-xen
kernel-docs
kernel-trace-base
kernel-ec2-devel-debuginfo
kernel-xen-debugsource
kernel-ec2-debugsource
kernel-default-debugsource
python3-perf
python3-perf-debuginfo
python2-perf-debuginfo
python2-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools-debuginfo
kernel-tools
kernel-devel
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
bpftool
kernel
kernel-headers
linux (Debian package)

How to mitigate CVE-2026-64564

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel-default-devel-debuginfo - update to 3.0.101-108.216.1
kernel-xen-base - update to 3.0.101-108.216.1
kernel-ec2-base - update to 3.0.101-108.216.1
kernel-xen-devel-debuginfo - update to 3.0.101-108.216.1
kernel-default-debuginfo - update to 3.0.101-108.216.1
kernel-trace-devel - update to 3.0.101-108.216.1
kernel-default-base - update to 3.0.101-108.216.1
kernel-xen-devel - update to 3.0.101-108.216.1
kernel-trace-debugsource - update to 3.0.101-108.216.1
kernel-ec2-devel - update to 3.0.101-108.216.1
kernel-default-devel - update to 3.0.101-108.216.1
kernel-trace-debuginfo - update to 3.0.101-108.216.1
kernel-xen-debuginfo - update to 3.0.101-108.216.1
kernel-source - update to 3.0.101-108.216.1
kernel-trace-devel-debuginfo - update to 3.0.101-108.216.1
kernel-ec2-debuginfo - update to 3.0.101-108.216.1
kernel-syms - update to 3.0.101-108.216.1
kernel-ec2 - update to 3.0.101-108.216.1
kernel-trace - update to 3.0.101-108.216.1
kernel-default - update to 3.0.101-108.216.1
kernel-xen - update to 3.0.101-108.216.1
kernel-docs - update to 3.0.101-108.216.1
kernel-trace-base - update to 3.0.101-108.216.1
kernel-ec2-devel-debuginfo - update to 3.0.101-108.216.1
kernel-xen-debugsource - update to 3.0.101-108.216.1
kernel-ec2-debugsource - update to 3.0.101-108.216.1
kernel-default-debugsource - update to 3.0.101-108.216.1
python3-perf - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
python3-perf-debuginfo - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
python2-perf-debuginfo - update to 4.19.90-2608.6.0.0388
python2-perf - update to 4.19.90-2608.6.0.0388
perf-debuginfo - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
perf - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-tools-devel - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-tools-debuginfo - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-tools - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-source - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-devel - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-debugsource - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-debuginfo - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
bpftool-debuginfo - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
bpftool - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel - addressed in versions 4.19.90-2608.6.0.0388, 5.10.0-329.0.0.230
kernel-headers - update to 5.10.0-329.0.0.230
linux (Debian package) - update to 6.12.101-1

External References

Related Security Bulletins