SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64002

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel allows for premature freeing of the `sysctl_local_reserved_ports` structure, potentially leading to use-after-free conditions. This could enable an attacker to exploit the system by manipulating the sysctl interface, resulting in denial of service or arbitrary code execution. Organizations using affected Linux distributions should prioritize patching this vulnerability to mitigate the associated risks.

CVE
CVE-2026-64002
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_reserved_ports too soon. Only after unregister_net_sysctl_table() we can be sure no threads can possibly use the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.