CVE-2026-64436

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where the pfkey msg2xfrm state() function fails to initialize the alg key len field for IPComp states. While authentication and encryption branches initialize this field, the compression branch leaves it containing uninitialized slab data. This uninitialized value is later used as a length by the xfrm algo clone() function during an XFRM MSG MIGRATE operation. If the garbage value in alg key len is non-zero, the kmemdup() function may read past the end of the calg object, leading to a slab-out-of-bounds read. Depending on the value, it may also cause an oversized memory allocation request, resulting in a migration clone failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.