linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

linux

linux-allwinner-5.19

linux-aws

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-aws-6.8

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-6.8

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-azure-fde-6.8

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-gcp-6.8

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-hwe-6.8

linux-ibm

linux-ibm-6.8

linux-intel-iot-realtime

linux-intel-iotg

linux-kvm

linux-lowlatency

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-lowlatency-hwe-6.8

linux-nvidia

linux-nvidia-6.2

linux-nvidia-6.5

linux-nvidia-6.8

linux-nvidia-tegra

linux-nvidia-tegra-igx

linux-oem-5.17

CVE-2026-64450 is a critical vulnerability in the Linux kernel's TIPC protocol handling that allows an out-of-bounds read via malformed broadcast Gap ACK blocks. The flaw arises because the broadcast message path does not properly verify that the Gap ACK record fits within the message data area, leading to a potentially large out-of-bounds memory read. This issue has been fixed in Linux kernel versions 5.15.0-1117.124~20.04.1 and later.

CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks in Linux kernel

A vulnerability in the Linux kernel's TIPC broadcast handling allowed an out-of-bounds read due to improper bounds checking of Gap ACK blocks in broadcast STATE_MSG messages. This flaw could lead to a kernel memory read beyond the allocated buffer, potentially causing system instability or denial of service. The issue was fixed by adding proper bounds checks to discard malformed broadcast messages. The vulnerability affects multiple Linux kernel versions prior to 7.0.0-31.31 and specific other versions listed. A patch is available and should be applied to mitigate the issue.

CVE-2026-64450 is a critical out-of-bounds read vulnerability in the Linux kernel's TIPC protocol broadcast handling. The flaw occurs because the broadcast path does not properly verify that a Gap ACK blocks record fits within the message data area, leading to an out-of-bounds read when copying data. This can cause kernel memory corruption and potentially a denial of service. The issue affects Linux kernel version 5.8 and has been fixed in subsequent commits.

Search: CVE-2026-64450