Threats Tagged 'cve-2026-64010'

SUSE Linux Enterprise 15 SP5 kernel received a security update addressing multiple vulnerabilities across various kernel components including networking, bonding, team, cpuidle, bpf, netfilter, sctp, futex, dm log, locking, virtiofs, tipc, keys, apparmor, scsi target, ipv6, tunnels, netfilter synproxy, nfc, security keys, net tls, drm, af_unix, vsock, RDMA, crypto, bpf devmap, ipv4 igmp, ALSA, KVM, rhashtable, fib, gtp, xfrm, btrfs, pppoe, ceph, and others. These fixes resolve issues such as memory leaks, infinite loops, type confusion, use-after-free, out-of-bounds reads/writes, race conditions, and other kernel-level bugs. The update is classified as high severity due to the breadth and nature of the vulnerabilities fixed. No CVSS score is provided. No specific affected versions are explicitly stated in the input data.

A use-after-free race condition vulnerability was identified and fixed in the Linux kernel's NFC LLCP connection state machine. The flaw occurs when the connection acceptance packet (CC) is processed concurrently with socket release, potentially leading to a use-after-free of the socket object. The issue was addressed by adding proper locking during the state transition and list movement in the nfc_llcp_recv_cc() function. This vulnerability has a high CVSS score of 8.8 and affects multiple Linux kernel versions prior to 7.0.0-28.28~24.04.1 and related builds. A patch is available and should be applied to mitigate the risk.