What is CVE-2026-99064?

CVE-2026-99064 is a High severity Linux kernel vulnerability with a CVSS score of 8.1 out of 10, affecting Linux kernel versions from 6.10 onward and patched in 6.12.113, 6.18.57, 7.2.11 and others. CVE-2026-99064 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-99064?

CVE-2026-99064 has a CVSS score of 8.1 out of 10, rated High severity. The vector string is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-99064?

Yes, CVE-2026-99064 has been patched. Fixed versions include 6.12.113, 6.18.57, 7.2.11 and others. If you are running Linux kernel 6.10 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-99064 actively exploited?

CVE-2026-99064 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-99064

High

In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipso_v4_skbuff_delattr() removes the CIPSO bytes but does not adjust cached offsets for options that follow them. For example, with a valid 10-byte CIPSO option followed by a seven-byte RR option, parsing records rr at offset 30. Removing CIPSO moves RR to offset 20, while the cached offset remains 30. Consumers such as ip_forward_options() and __ip_options_echo() then access the wrong bytes; the latter may interpret packet data as the option length and copy it into fixed-size option storage. Mirror cipso_v4_delopt() and subtract cipso_len from the srr, rr, ts and router_alert offsets when they follow CIPSO. cipso_len is the distance the first memmove() shifts those options. The later header move and network-header reset relocate the bytes and their offset base together.

Package Linux Kernel

Published 2026-10-23

Last modified 2026-10-24

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

8.1

out of 10

High

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 6.10 and later are affected. Fixed in 6.12.113, 6.18.57, 7.2.11, 7.3 and their respective stable series.

Affected from

≥ 6.10

Fixed in

✓ 6.12.113 6.12.x ✓ 6.18.57 6.18.x ✓ 7.2.11 7.2.x ✓ 7.3

References

4 total

Details

CVE ID CVE-2026-99064

Severity High

CVSS score 8.1 / 10

CVSS version 3.1

Published 2026-10-23

Modified 2026-10-24

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-99064?

CVE-2026-99064 is a High severity Linux kernel vulnerability with a CVSS score of 8.1 out of 10 . It affects Linux kernel versions from 6.10 onward and has been patched in 6.12.113, 6.18.57, 7.2.11 and others. CVE-2026-99064 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-99064?

CVE-2026-99064 has a CVSS score of 8.1 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-99064?

Yes. CVE-2026-99064 has been patched. Fixed versions include 6.12.113, 6.18.57, 7.2.11 and others. If you are running Linux kernel 6.10 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-99064 actively exploited?

No. CVE-2026-99064 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.