PT-2026-61449 · Linux+1 · Linux Kernel+1
CVE-2026-64132
·
Published
2026-05-21
·
Updated
2026-09-07
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the
ipv6 hop ioam() function where the hdr pointer is not updated after a call to skb ensure writable(). If the socket buffer (skb) is cloned or lacks sufficient linear headroom, skb ensure writable() may trigger pskb expand head(), which reallocates the data buffer and frees the original one. Because the hdr pointer is not recalculated before being used in the ioam6 event() function, a Use-After-Free (UaF) condition occurs. Use-After-Free is a memory corruption issue where an application continues to use a pointer after it has been freed.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu