CVE-2026-64113

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the ixgbevf driver during VEPA multicast source pruning. The function ixgbevf clean rx irq() frees a socket buffer (skb) and continues to the next descriptor without resetting the skb pointer to NULL. Consequently, the subsequent iteration may enter a path that calls ixgbevf add rx frag() using the already freed skb, leading to a memory dereference of skb shinfo(skb)->nr frags within the NAPI softirq context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.