CVE-2026-64002
In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_reserved_ports too soon. Only after unregister_net_sysctl_table() we can be sure no threads can possibly use the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.
- Published Jul 19, 2026
- CVSS 7.8 high
- 0.1% chance of exploitation in the next 30 days (EPSS)
- A fix is available
Affected software
In the news
- Multiple vulnerabilities in the Ubuntu Linux kernel CERT-FR ·
- Multiple vulnerabilities in the SUSE Linux kernel CERT-FR ·
- Multiple vulnerabilities in the SUSE Linux kernel CERT-FR ·
- Multiple vulnerabilities in the Ubuntu Linux kernel CERT-FR ·
- Multiple vulnerabilities in the Red Hat Linux kernel CERT-FR ·
- Multiple vulnerabilities in the SUSE Linux kernel CERT-FR ·