7.5

CVE-2026-64577: linux

CVSS: 7.5v3.1HighReceived
AliasesUBUNTU-CVE-2026-64577DEBIAN-CVE-2026-64577
Published 05-08-2026Last modified 19-08-2026
Open JSON

Vulnerability summary

CVE-2026-64577 is a high (CVSS 7.5) vulnerability in linux. EPSS estimates a 0.58% chance of exploitation in the next 30 days, higher than 46.3% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.58%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 26 · Related 24
MGASA-2026-0336MGASA-2026-0337OPENSUSE-SU-2026:11476-1OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23477-1SUSE-SU-2026:23481-1

Timeline

  1. 05-08-2026
    PublishedVulnerability first disclosed.
  2. 19-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() gtp1u_send_echo_resp() ignores skb_pull_data()'s return value. Its caller gtp1u_udp_encap_recv() only guarantees 16 bytes (udphdr + gtp1_header), but the pull requests 20 (gtp1_header_long + udphdr). For a 16-19 byte echo request the pull fails and returns NULL without advancing skb->data; execution continues, and the following skb_push() plus the IP header pushed by iptunnel_xmit() move skb->data below skb->head, tripping skb_under_panic(). Fix it by dropping the packet when skb_pull_data() fails. skbuff: skb_under_panic: ... kernel BUG at net/core/skbuff.c:214! Call Trace: skb_push (net/core/skbuff.c:2648) iptunnel_xmit (net/ipv4/ip_tunnel_core.c:82) gtp_encap_recv (drivers/net/gtp.c:701 drivers/net/gtp.c:808 drivers/net/gtp.c:920) udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) ... Kernel panic - not syncing: Fatal exception in interrupt

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.58%

Chance of exploitation in the next 30 days

Percentile

46%

Versus all other CVEs

30-day change

0.00 pp

From 0.58% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu142 products
  • linuxAll versions (No fix recorded) | < 6.8.0-147.147 | < 7.0.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1067.70 | < 7.0.0-1014.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.101-1 | < 7.1.6-1
  • linux-6.12< 6.12.101-1~deb12u1
Linux1 product
  • linux≥ 9af41cc33471ea1efa6f77e188f055cc77d0a5c5, < 9033fe49926f0e7421fefee922dc086417e905cf | ≥ 9af41cc33471ea1efa6f77e188f055cc77d0a5c5, < b3c733eaae7f362601c28ac1533d47a961cd3e1c | ≥ 9af41cc33471ea1efa6f77e188f055cc77d0a5c5, < 4fc7923871d176ce0e5fecf4a9b7bb915af790ed | ≥ 9af41cc33471ea1efa6f77e188f055cc77d0a5c5, < 961e9b1e33445f8e42859ecc020c9f60d8b69a8b | ≥ 9af41cc33471ea1efa6f77e188f055cc77d0a5c5, < cf45d748e437b8dd2dd987f27ee79c8c86f95c88 | ≥ 9af41cc33471ea1efa6f77e188f055cc77d0a5c5, < cd170f051dba9ac146fabcd1b91726487c0cb9fa | 5.18

3 vendors · 145 products

References

19 links
Show all 19 references