What is CVE-2026-64355?

CVE-2026-64355 is a Critical severity Linux kernel vulnerability with a CVSS score of 9.8 out of 10, classified as a Out-of-bounds Read flaw (CWE-125), affecting Linux kernel versions from 5.14 onward and patched in 5.15.212, 6.1.178, 6.6.145 and others. CVE-2026-64355 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-64355?

CVE-2026-64355 has a CVSS score of 9.8 out of 10, rated Critical severity. The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-64355?

Yes, CVE-2026-64355 has been patched. Fixed versions include 5.15.212, 6.1.178, 6.6.145 and others. If you are running Linux kernel 5.14 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-64355 actively exploited?

CVE-2026-64355 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Out-of-bounds Read (CWE-125)?

The product reads data past the end or before the beginning of the intended buffer. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/125.html

CVE-2026-64355

Critical

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap broadcast redirects clone the packet for all but the last destination. For native XDP, that clone path copies only the linear xdp_frame data, while fragmented frames keep skb_shared_info in tailroom outside the linear area. Cloning such a frame leaves XDP_FLAGS_HAS_FRAGS set but without valid frag metadata, and the later free path can interpret uninitialized tail data as skb_shared_info, leading to an out-of-bounds access during frame return. Reject fragmented native XDP frames in dev_map_enqueue_clone(). Add the same restriction to the generic XDP clone path in dev_map_redirect_clone(). Generic XDP represents fragmented packets as nonlinear skbs, and rejecting them here keeps clone-based broadcast support aligned between native and generic XDP.

Package Linux Kernel

Published 2026-07-25

Last modified 2026-09-04

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

9.8

out of 10

Critical

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-125

CVE-2026-64355 is a Out-of-bounds Read vulnerability

What is Out-of-bounds Read?

The product reads data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.14 and later are affected. Fixed in 5.15.212, 6.1.178, 6.6.145, 6.12.96, 6.18.39, 7.1.4, 7.2 and their respective stable series.

Affected from

≥ 5.14

Fixed in

✓ 5.15.212 5.15.x ✓ 6.1.178 6.1.x ✓ 6.6.145 6.6.x ✓ 6.12.96 6.12.x ✓ 6.18.39 6.18.x ✓ 7.1.4 7.1.x ✓ 7.2

References

7 total

Kernel Git
https://git.kernel.org/stable/c/07a4c11ee8ef4abcb39d922e9e410ae269671cdf

Patch
Kernel Git
https://git.kernel.org/stable/c/47baddc856ae7e93a565dd9deeb797999b179466

Patch
Kernel Git
https://git.kernel.org/stable/c/51d07c12ca411e692c424ecdabf077f1e61a61be

Patch
Kernel Git
https://git.kernel.org/stable/c/a9bb2d9c798cb62a4050a991c27b752770c33afe

Patch
Kernel Git
https://git.kernel.org/stable/c/aa496720618f1a6054f1c870bf10b4f6c99bf656

Patch

Showing 5 of 7 references View all on NVD

Details

CVE ID CVE-2026-64355

Severity Critical

CVSS score 9.8 / 10

CVSS version 3.1

Published 2026-07-25

Modified 2026-09-04

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-64355?

CVE-2026-64355 is a Critical severity Linux kernel vulnerability with a CVSS score of 9.8 out of 10 , classified as an Out-of-bounds Read flaw (CWE-125) . It affects Linux kernel versions from 5.14 onward and has been patched in 5.15.212, 6.1.178, 6.6.145 and others. CVE-2026-64355 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-64355?

CVE-2026-64355 has a CVSS score of 9.8 out of 10, rated Critical severity (CVSS 3.1). The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-64355?

Yes. CVE-2026-64355 has been patched. Fixed versions include 5.15.212, 6.1.178, 6.6.145 and others. If you are running Linux kernel 5.14 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-64355 actively exploited?

No. CVE-2026-64355 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.