The Linux kernel vulnerability CVE-2026-64027 concerns the network shaper's handling of VALID flags in XArray entries. A recent commit changed the semantics of these flags, but failed to account for the non-atomic storage of flags alongside entries, creating a race condition. A reader may see a VALID mark, get interrupted, and then access a different entry replaced by a writer, causing a use-after-free scenario. The root cause is that net_shaper_rollback() frees entries without observing RCU synchronization if the VALID flag is not set. The fix involved replacing the XArray marks with an explicit valid field and using smp_load_acquire() and smp_store_release() memory barriers to ensure proper synchronization.

The vulnerability can cause use-after-free conditions in the Linux kernel's network shaper code, potentially leading to kernel memory corruption or instability. No known exploits in the wild have been reported. The impact is limited to affected kernel versions and depends on exploitation feasibility, which is not detailed in the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description indicates that a code fix has been implemented to rework the VALID marking and synchronization, but no explicit patch or vendor advisory link is provided. Users should monitor official Linux kernel advisories for updates and apply fixes once available.