PT-2026-61642 · Linux · Linux Kernel

CVE-2026-64189 · Published 2026-07-20 · Updated 2026-07-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A race condition exists in the netfilter ipset component between the dump process and the ip set list resize operation. The functions ip set dump do() and ip set dump done() access inst->ip set list via ip set ref netlink() without an RCU (Read-Copy-Update) read-side critical section. When ip set create() concurrently expands the array, it may free the old array while the dump paths are still indexing into it, leading to a use-after-free scenario. This can result in a kernel panic or a general protection fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64189

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-64189 · Security Note
• https://git.kernel.org/stable/c/81d54c766337b923eec26da0a13406760b091093 · Note
• https://git.kernel.org/stable/c/7cd9103283b26b917360ec99d7d2f2d761bcf1ab · Note
• https://git.kernel.org/stable/c/e8ee198bbc04a32d336e79160fde980e0235b39f · Note
• https://git.kernel.org/stable/c/ff86ea9b7fdf70564e60436fbee68c96bc459943 · Note
• https://twitter.com/vuldb/status/2079281062367437285 · Twitter Post