by Kastro
Paper/Archive/CVE-2026-64000

CVE-2026-64000

Linux Linux — net: hsr: fix potential OOB access in supervision frame handling

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 42.1.421 × 208.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is linearized before access by adding sizeof(struct hsr_sup_tlv) to the pskb_may_pull() calls. Without this, a truncated frame could cause an out-of-bounds access.

Affected

ProductAffectedFixed inSource
Linuxeafaa88b3eb7f28aecb222281655473431d3ef2e – < 09a37dca090c55ffb1a33f52d8667f1c2367ef4809a37dca090c55ffb1a33f52d8667f1c2367ef48CNA
Linuxeafaa88b3eb7f28aecb222281655473431d3ef2e – < a4b64f3e9c7b8259f7dd251a0313420ba7c01852a4b64f3e9c7b8259f7dd251a0313420ba7c01852CNA
Linuxeafaa88b3eb7f28aecb222281655473431d3ef2e – < 71c986c0ba45b7dc574fae27c83e7b6671556f3771c986c0ba45b7dc574fae27c83e7b6671556f37CNA
Linuxeafaa88b3eb7f28aecb222281655473431d3ef2e – < fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7CNA
Linuxeafaa88b3eb7f28aecb222281655473431d3ef2e – < 78607a6854a22a2502f68092202e75a39af4865d78607a6854a22a2502f68092202e75a39af4865dCNA
Linuxeafaa88b3eb7f28aecb222281655473431d3ef2e – < f229426072fc865654a60978bb7fda790a051ff3f229426072fc865654a60978bb7fda790a051ff3CNA
Linux5.16–CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgit.kernel.org/stable/c/09a37dca090c55ffb1a33f52d8667f1c2367ef48refgit.kernel.org/stable/c/a4b64f3e9c7b8259f7dd251a0313420ba7c01852refgit.kernel.org/stable/c/71c986c0ba45b7dc574fae27c83e7b6671556f37refgit.kernel.org/stable/c/fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7refgit.kernel.org/stable/c/78607a6854a22a2502f68092202e75a39af4865drefgit.kernel.org/stable/c/f229426072fc865654a60978bb7fda790a051ff3