CVE-2026-64190

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the Linux kernel during a mode change in the team network driver. The function team change mode() uses memset() to clear team->ops before restoring dummy handlers via team adjust ops(). If a concurrent team xmit() function runs under RCU (Read-Copy-Update, a synchronization mechanism) on another CPU, it may read team->ops.transmit while it is NULL and attempt to call it, resulting in a kernel crash. This race condition occurs when a mode change, requiring CAP NET ADMIN privileges, happens simultaneously with a transmit operation on the team device, particularly when using AF PACKET with a forced carrier.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.