CVE-2026-64518: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-64518DEBIAN-CVE-2026-64518
Published 25-07-2026Last modified 25-07-2026
Open JSON

Vulnerability summary

CVE-2026-64518 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.7% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 23 · Related 23
OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23881-1SUSE-SU-2026:23887-1SUSE-SU-2026:23897-1SUSE-SU-2026:23902-1USN-8618-1

Timeline

  1. 25-07-2026
    PublishedVulnerability first disclosed.

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). lockdep_sock_is_held() was added in tcp_ao_established_key() by the cited commit. It can be called from tcp_v[46]_timewait_ack() with twsk. Since it does not have sk->sk_lock, the lockdep annotation results in out-of-bound access. $ pahole -C tcp_timewait_sock vmlinux | grep size /* size: 288, cachelines: 5, members: 8 */ $ pahole -C sock vmlinux | grep sk_lock socket_lock_t sk_lock; /* 440 192 */ Let's not use lockdep_sock_is_held() for TCP_TIME_WAIT.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

0.00 pp

From 0.17% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu140 products
  • linux< 6.8.0-139.139 | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1064.67 | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.12.94-1 | < 7.0.12-1
Linux1 product
  • linux≥ 051f49d5176613dea88ecf73a101c3a99f4720e9, < 87bb3e719042f0030a6dad39118c6a6b2a491ad9 | ≥ 6b2d11e2d8fc130df4708be0b6b53fd3e6b54cf6, < 510db031ba6eb40134f84c90ef963ea4b6dfb878 | ≥ 6b2d11e2d8fc130df4708be0b6b53fd3e6b54cf6, < 29cf64d128c94cf98d1c69d8b2962d39db5ff4c6 | ≥ 6b2d11e2d8fc130df4708be0b6b53fd3e6b54cf6, < 03cb001ef87b3f8d859cf7f96329acf3d6235d29 | ≥ 6.12.5, < 6.12.92 | 6.13

3 vendors · 142 products

References

26 links
Show all 26 references