CVE-2026-64414

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter component where the system fails to properly handle socket buffers (skb) with unreadable fragments, such as those from devmem TCP. When the skb frags readable() function returns false and the u32 module processes the buffer, the skb copy bits() function returns a negative error code. This affects several components: the xt u32 module may incorrectly return true when a hotdrop is set, and the nfnetlink queue and nfnetlink log components fail to restrict processing to the linear part of the buffer. Additionally, skb zerocopy helpers do not copy the readable flag, further impacting nfnetlink queue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.