CVE-2026-64004

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-64004
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64004.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64004
Downstream
Published
2026-07-19T14:56:20.895Z
Modified
2026-07-22T05:30:13.901790838Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
net/iucv: fix locking in .getsockopt
Details

In the Linux kernel, the following vulnerability has been resolved:

net/iucv: fix locking in .getsockopt

Mirror iucvsocksetsockopt() and wrap the whole switch in locksock()/releasesock(). The pre-existing SO_MSGLIMIT-only lock becomes redundant and is removed.

Any AFIUCV HIPER user can potentially crash the kernel by racing recvmsg() with getsockopt(SOMSGSIZE): the SOMSGSIZE arm dereferences iucv->hsdev->mtu after iucvsockclose() (called from the racing recvmsg()) has set hs_dev to NULL, producing a NULL pointer dereference oops.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64004.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
51363b8751a673a00ad48eea895266396d53fa52
Fixed
884eb247b74d86db97e3a37f0d6fc8e1e83590dd
Fixed
45bb8de8c95d8899f4b8f61bd9bceb8132af73cb
Fixed
1fc30bd4e55e2dd622d2d366cecd732c1841bbee
Fixed
cd691beafea0dd779e69e81ccc26b0ab50efcb5e
Fixed
6e792b8dd3002bbc4136745928a9605df1a72b8a
Fixed
9817369243380e287ebe5525411557eaa3aa2a79
Fixed
69554adc7a6fa04ede3ad7512321d83748e3c920
Fixed
3589d20a666caf30ad100c960a2de7de390fce88

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64004.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.0
Fixed
5.10.259
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.210
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.176
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.143
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.93
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.35
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.12

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64004.json"