What is CVE-2026-64284?

CVE-2026-64284 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10, affecting Linux kernel versions from 6.12 onward and patched in 6.12.96, 6.18.39, 7.1.4 and others. CVE-2026-64284 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-64284?

CVE-2026-64284 has a CVSS score of 7.1 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Is there a patch available for CVE-2026-64284?

Yes, CVE-2026-64284 has been patched. Fixed versions include 6.12.96, 6.18.39, 7.1.4 and others. If you are running Linux kernel 6.12 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-64284 actively exploited?

CVE-2026-64284 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-64284

High

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Move the handling of fastpath userspace exits into vendor code to ensure KVM runs vendor specific operations that need to run before userspace gains control of the vCPU. E.g. for VMX (and soon to be for SVM as well), KVM needs to flush the PML buffer prior to exiting to userspace, otherwise any memory written by the final KVM_RUN might never be flagged as dirty. Note, waiting to snapshot CR0 and CR3 until svm_handle_exit() is flawed in general, as that risks consuming stale state in a fastpath handler. That will be addressed in a future change.

Package Linux Kernel

Published 2026-07-25

Last modified 2026-08-17

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.1

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness type

CWE-367

CVE-2026-64284 is classified as CWE-367

See CWE-367 on MITRE CWE for full details on this weakness type.

Affected versions

Linux kernel versions 6.12 and later are affected. Fixed in 6.12.96, 6.18.39, 7.1.4, 7.2 and their respective stable series.

Affected from

≥ 6.12

Fixed in

✓ 6.12.96 6.12.x ✓ 6.18.39 6.18.x ✓ 7.1.4 7.1.x ✓ 7.2

References

4 total

Kernel Git
https://git.kernel.org/stable/c/0ffedf43910e44b76c2c1db4e9fbf12b268190c1

Patch
Kernel Git
https://git.kernel.org/stable/c/4ad73ef0e7966ecfe67de0060537b4cb14d9acd4

Patch
Kernel Git
https://git.kernel.org/stable/c/b3436d9b9b1affe1c3191ac9831308923f5f03c3

Patch
Kernel Git
https://git.kernel.org/stable/c/f2ca2b5326211bd38490f0497eb583721ce0bbc0

Patch

Details

CVE ID CVE-2026-64284

Severity High

CVSS score 7.1 / 10

CVSS version 3.1

Published 2026-07-25

Modified 2026-08-17

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-64284?

CVE-2026-64284 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10 . It affects Linux kernel versions from 6.12 onward and has been patched in 6.12.96, 6.18.39, 7.1.4 and others. CVE-2026-64284 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-64284?

CVE-2026-64284 has a CVSS score of 7.1 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.
Is there a patch available for CVE-2026-64284?

Yes. CVE-2026-64284 has been patched. Fixed versions include 6.12.96, 6.18.39, 7.1.4 and others. If you are running Linux kernel 6.12 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-64284 actively exploited?

No. CVE-2026-64284 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.