Red Hat Security Advisory: kernel-rt security update
Description
A use-after-free vulnerability in the Linux kernel's vsock/vmci subsystem was fixed by Red Hat. The flaw occurs during a peer reset connection in the handshake phase, causing improper socket cleanup and leading to a use-after-free condition detected by KASAN. This vulnerability has high severity and affects multiple Linux kernel versions prior to specific 5.15.x updates. Official kernel updates have been released to address this issue. Users should apply these updates and reboot to mitigate the vulnerability.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-64115) involves a use-after-free condition in the Linux kernel's vsock/vmci subsystem triggered during the handshake phase of a peer reset connection. The improper socket cleanup leads to memory corruption detected by Kernel Address Sanitizer (KASAN). Red Hat has released official kernel updates to fix this flaw, which affects multiple Linux kernel versions prior to certain 5.15.x updates. The issue is tracked under CWE-787 (Out-of-bounds Write) and CWE-825 (Expansion of Memory Allocation).
Potential Impact
Successful exploitation could lead to memory corruption due to use-after-free, potentially causing system instability or crashes. The vulnerability is rated with high severity (8.8) indicating significant risk if unpatched. There are no known exploits in the wild at this time.
Mitigation Recommendations
Official kernel updates from Red Hat are available and should be applied promptly. Users must update their Linux kernel to the fixed versions and reboot their systems to fully mitigate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-c2c8-f8x2-chfh
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64115"]
- Cvss Version
- 3.1
Threat ID: 6a5d27a92a4a8d598912b889
Added to database: 07/19/2026, 19:38:17 UTC
Last enriched: 10/16/2026, 23:25:53 UTC
Last updated: 10/18/2026, 18:48:22 UTC
Views: 144
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.