Threats Tagged 'cve-2026-64109'

SUSE Linux Enterprise 15 SP5 kernel received a security update addressing multiple vulnerabilities across various kernel components including networking, bonding, team, cpuidle, bpf, netfilter, sctp, futex, dm log, locking, virtiofs, tipc, keys, apparmor, scsi target, ipv6, tunnels, netfilter synproxy, nfc, security keys, net tls, drm, af_unix, vsock, RDMA, crypto, bpf devmap, ipv4 igmp, ALSA, KVM, rhashtable, fib, gtp, xfrm, btrfs, pppoe, ceph, and others. These fixes resolve issues such as memory leaks, infinite loops, type confusion, use-after-free, out-of-bounds reads/writes, race conditions, and other kernel-level bugs. The update is classified as high severity due to the breadth and nature of the vulnerabilities fixed. No CVSS score is provided. No specific affected versions are explicitly stated in the input data.

A use-after-free (UAF) vulnerability in the Linux kernel's af_unix subsystem was resolved. The flaw involved the function unix_stream_data_wait() dereferencing a pointer to a socket buffer (SKB) that could have been freed, leading to potential memory corruption. This issue arises from a race condition when peeking and receiving data concurrently on the same socket. The vulnerability has been assigned CVE-2026-64109 and affects multiple linux-aws kernel versions prior to 7.0.0-28.28~24.04.1 and related builds. A patch is available and should be applied to mitigate the risk.