CVE-2026-64047

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An off-by-one error exists in the tls push record() function when handling the sk msg scatterlist ring. When the ring wraps, the sg chain() function is used to chain the tail portion of the ring to the head. The implementation incorrectly calculates the entry count, placing the chain pointer at data[MAX SKB FRAGS] instead of the actual last entry of the array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.