SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64000

CRITICAL · CVSS 9.8 EPSS 0.49%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A critical vulnerability in the Linux kernel affects the handling of supervision frames in the HSR (High-availability Seamless Redundancy) protocol, potentially leading to out-of-bounds access due to improper linearization of the TLV header. This flaw could be exploited to execute arbitrary code or crash the system, posing significant risks to network stability and security. Organizations using Linux-based systems, especially those relying on HSR for network redundancy, should prioritize patching this vulnerability immediately.

CVE
CVE-2026-64000
Severity
CRITICAL
CVSS
9.8
EPSS
0.49%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is linearized before access by adding sizeof(struct hsr_sup_tlv) to the pskb_may_pull() calls. Without this, a truncated frame could cause an out-of-bounds access.