CVE-2026-64106

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.15% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 4.5% of scored records. A rank, not a probability.

NVD base score

9.0 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-08-12.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-07-19 15:40Z1 MO AGO

Last updated

2026-08-05 12:39Z1 MO AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.0)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Weaknesses

• CWE-805Buffer Access with Incorrect Length ValueBase

Data version

5.2

Document digest

0e9023eedecac23d0d17de57d8742fad8c33070c84c40180e354630885aee8e4

• git.kernel.orghttps://git.kernel.org/stable/c/1716b7fea2ead941a0dfac06c4504a3437cdf00d
• git.kernel.orghttps://git.kernel.org/stable/c/dab9f93251b2c86a033de6098d0c73afddd55d4a
• git.kernel.orghttps://git.kernel.org/stable/c/b94538186a3eae3763b8f96dacd610920a865aa7
• git.kernel.orghttps://git.kernel.org/stable/c/0680f511926589206f81f57f76ce131d7741a316
• git.kernel.orghttps://git.kernel.org/stable/c/8bcd15b690a390241179516af1b6ae49ebfd9d95
• git.kernel.orghttps://git.kernel.org/stable/c/9ce754ed8e7ab4e3999767ce1505f85c449ccb07