CVE-2026-64004

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the net/iucv component when recvmsg() is called simultaneously with getsockopt(SO MSGSIZE). An AF IUCV HIPER user can trigger a NULL pointer dereference because the SO MSGSIZE operation attempts to access iucv->hs dev->mtu after iucv sock close() has already set hs dev to NULL, leading to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.