Skip to main content
CVE-2026-64518VulnerabilityPublished 07/27/2026Updated 09/07/2026

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). (CVE-2026-64518)

Affects linux-hwe-edgeSource GCVE Database

Severity
Medium

No CVSS score published yet

Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.2% chance of exploitation in 30 days – higher than 5% of CVEs
Patch
Available

What to do

AI-suggested

A patch is available and has been released by Ubuntu as part of their Linux kernel updates. Users should update their systems to the fixed kernel versions listed in the Ubuntu security notices USN-8618-1 and USN-8663-1 and reboot to apply the changes. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be required. No additional mitigation actions are indicated by the vendor advisory.

Affected software

ProductAffectedFixed in
linux-hwe-edgeAffected
  • <7.0.0-28.28
  • <7.0.0-1009.9
  • <7.0.0-1010.10
  • <7.0.0-1008.8
  • <6.8.0-139.139
  • <6.8.0-1067.75
Fixed in–

Description

A vulnerability in the Linux kernel's TCP implementation involving an out-of-bounds access for the twsk structure in the tcp_ao_established_key() function has been resolved. The issue arises because lockdep_sock_is_held() was used improperly for TCP_TIME_WAIT sockets, which lack the sk_lock member, causing out-of-bounds access. This flaw has been fixed in updated Linux kernel versions. The vulnerability affects multiple versions of the linux-hwe-edge kernel prior to various 7.0.0 and 6.8.x releases. A patch is available, and users are advised to update and reboot their systems. No known exploits are reported in the wild. The severity is assessed as medium.

References