CVE-2026-64046

A flaw was found in the Linux kernel's network Transport Layer Security (TLS) subsystem. An issue in how scatterlist entries are chained could lead to illegal input being provided to cryptographic operations. This could potentially affect the integrity of TLS communications.

Red Hat has rated this vulnerability as having a Moderate impact because exploiting it requires local privileges to create and configure kernel TLS sockets, and the resulting disruption is limited to a system crash or denial of service without compromising confidentiality or permitting code execution. In typical Red Hat Enterprise Linux deployments, the in-kernel TLS module is not loaded by default and is only engaged when local software explicitly requests kernel-level TLS socket handling. Consequently, systems running standard userspace cryptographic implementations are not exposed unless kTLS features are actively invoked.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.