PT-2026-61449 · Linux+1 · Linux Kernel+1

CVE-2026-64132

·

Published

2026-05-21

·

Updated

2026-09-07

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ipv6 hop ioam() function where the hdr pointer is not updated after a call to skb ensure writable(). If the socket buffer (skb) is cloned or lacks sufficient linear headroom, skb ensure writable() may trigger pskb expand head(), which reallocates the data buffer and frees the original one. Because the hdr pointer is not recalculated before being used in the ioam6 event() function, a Use-After-Free (UaF) condition occurs. Use-After-Free is a memory corruption issue where an application continues to use a pointer after it has been freed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-14270
CVE-2026-64132
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu