PT-2026-61317 · Linux · Linux Kernel

CVE-2026-64000 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds access issue exists in the handling of supervision frames within the High-availability Seamless Redundancy (HSR) network protocol. The problem occurs when a truncated frame is processed because the entire Type-Length-Value (TLV) header is not properly linearized before access. This is addressed by ensuring pskb may pull() accounts for the size of the hsr sup tlv structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64000

Affected Products

Linux Kernel

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-64000 · Security Note
• https://git.kernel.org/stable/c/71c986c0ba45b7dc574fae27c83e7b6671556f37 · Note
• https://git.kernel.org/stable/c/f229426072fc865654a60978bb7fda790a051ff3 · Note
• https://git.kernel.org/stable/c/09a37dca090c55ffb1a33f52d8667f1c2367ef48 · Note
• https://twitter.com/infoflowcloud/status/2078862663849766934 · Twitter Post
• https://git.kernel.org/stable/c/a4b64f3e9c7b8259f7dd251a0313420ba7c01852 · Note
• https://git.kernel.org/stable/c/fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7 · Note
• https://twitter.com/CVEnew/status/2078861442669854849 · Twitter Post
• https://git.kernel.org/stable/c/78607a6854a22a2502f68092202e75a39af4865d · Note