PT-2026-64634 · Linux+1 · Linux Kernel+1

CVE-2026-64413

·

Published

2026-07-25

·

Updated

2026-09-07

CVSS v3.1

7.0

High

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the netfilter ebtables table translation where a sparse cpu possible mask can lead to an uninitialized pointer free. If the cpu possible mask is sparse, the allocation loop may skip certain CPUs. If the vmalloc node() function fails for a subsequent CPU, the cleanup loop may attempt to call vfree() on an uninitialized element within the newinfo->chainstack array.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-93930
CVE-2026-64413
OPENSUSE-SU-2026:11476-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu