CVE-2026-64115

A flaw was found in the vsock/vmci component of the Linux kernel. A remote attacker could exploit a Use-After-Free (UAF) vulnerability when a peer resets a connection during the handshake process. This occurs because the system incorrectly handles reset packets, leading to a pending socket being left in an invalid state. Exploiting this flaw could cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because exploitation is constrained to virtualized environments running VMware VMCI transport and requires triggering a specific race condition during the connection handshake. The issue cannot be exploited remotely over standard network interfaces, as it is limited to systems configured to communicate across VMCI channels. Consequently, systems not running as VMware guests or hosts using VMCI socket services are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.