CVE-2026-64569: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-64569DEBIAN-CVE-2026-64569
Published 05-08-2026Last modified 19-08-2026
Open JSON

Vulnerability summary

CVE-2026-64569 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 24 · Related 22
MGASA-2026-0336MGASA-2026-0337OPENSUSE-SU-2026:11476-1OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23881-1SUSE-SU-2026:23887-1

Timeline

  1. 05-08-2026
    PublishedVulnerability first disclosed.
  2. 19-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n On CONFIG_INET=n builds, mpls_valid_fib_dump_req() walks the parsed attribute table itself instead of calling ip_valid_fib_dump_req(). The RTA_OIF arm passes tb[RTA_OIF] to nla_get_u32() without checking it is present, so an RTM_GETROUTE dump for AF_MPLS with strict checking and no RTA_OIF hits a NULL dereference. RTM_GETROUTE is RTNL_KIND_GET, which rtnetlink_rcv_msg() permits without CAP_NET_ADMIN, so an unprivileged user can trigger it. Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:mpls_valid_fib_dump_req (net/mpls/af_mpls.c:2189) Call Trace: mpls_dump_routes (net/mpls/af_mpls.c:2236) netlink_dump (net/netlink/af_netlink.c:2331) __netlink_dump_start (net/netlink/af_netlink.c:2446) rtnetlink_rcv_msg (net/core/rtnetlink.c:7033) netlink_rcv_skb (net/netlink/af_netlink.c:2556) netlink_unicast (net/netlink/af_netlink.c:1345) netlink_sendmsg (net/netlink/af_netlink.c:1900) __sock_sendmsg (net/socket.c:790) ____sys_sendmsg (net/socket.c:2684) ___sys_sendmsg (net/socket.c:2738) __sys_sendmsg (net/socket.c:2770) do_syscall_64 (arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) Skip unset attributes, as ip_valid_fib_dump_req() does.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

0.00 pp

From 0.17% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu165 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-147.147 | < 7.0.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1067.70 | < 7.0.0-1014.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.101-1 | < 7.1.6-1
  • linux-6.12< 6.12.101-1~deb12u1
Linux1 product
  • linux≥ 196cfebf897266c3450519e916bab9daff74e52c, < bfc1cb5d6a8308e493e307f1c823d2107abc0a47 | ≥ 196cfebf897266c3450519e916bab9daff74e52c, < 03b5a2c29afc8e634924c75d6ee94140e70de88d | ≥ 196cfebf897266c3450519e916bab9daff74e52c, < e796ce9ef4356dc7cbbaa8373843f77852f2814d | ≥ 196cfebf897266c3450519e916bab9daff74e52c, < d6eee7cd078aaf9dd75efc801f6c9b608a37cd71 | ≥ 196cfebf897266c3450519e916bab9daff74e52c, < ad6284ced6a15e4abd57ca4d0793b7bd15ca52ce | ≥ 196cfebf897266c3450519e916bab9daff74e52c, < 5f6e7b32bd1fbde10fd31a4143260735ea535b8a | ≥ 196cfebf897266c3450519e916bab9daff74e52c, < 06db79411a280707c7e4bf4b221ff4e664b51502 | ≥ 196cfebf897266c3450519e916bab9daff74e52c, < 56d96fededd61192cd7cc8d2b0f36adfd59036c3 | 4.20

3 vendors · 168 products

References

27 links
Show all 27 references