CVE-2026-64000
- Source
- https://cve.org/CVERecord?id=CVE-2026-64000
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64000.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64000
- Downstream
- Published
- 2026-07-19T14:56:18.116Z
- Modified
- 2026-07-21T03:47:46.488074125Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- net: hsr: fix potential OOB access in supervision frame handling
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: hsr: fix potential OOB access in supervision frame handling
Ensure the entire TLV header is linearized before access by adding sizeof(struct hsrsuptlv) to the pskbmaypull() calls. Without this, a truncated frame could cause an out-of-bounds access.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64000.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/09a37dca090c55ffb1a33f52d8667f1c2367ef48
- https://git.kernel.org/stable/c/71c986c0ba45b7dc574fae27c83e7b6671556f37
- https://git.kernel.org/stable/c/78607a6854a22a2502f68092202e75a39af4865d
- https://git.kernel.org/stable/c/a4b64f3e9c7b8259f7dd251a0313420ba7c01852
- https://git.kernel.org/stable/c/f229426072fc865654a60978bb7fda790a051ff3
- https://git.kernel.org/stable/c/fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64000.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64000
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedeafaa88b3eb7f28aecb222281655473431d3ef2eFixed09a37dca090c55ffb1a33f52d8667f1c2367ef48Fixeda4b64f3e9c7b8259f7dd251a0313420ba7c01852Fixed71c986c0ba45b7dc574fae27c83e7b6671556f37Fixedfbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7Fixed78607a6854a22a2502f68092202e75a39af4865dFixedf229426072fc865654a60978bb7fda790a051ff3