CVE-2026-64436

A flaw was found in the Linux kernel. An uninitialized variable in the IPComp (IP Compression) state handling could allow a local attacker to trigger an out-of-bounds read during state migration. This vulnerability could lead to the disclosure of sensitive kernel memory or cause a denial of service by making the migration clone fail.

Red Hat has evaluated this issue as having a Moderate impact because exploitation requires local access with network management privileges to manipulate IPsec security associations and execute state migration. The out-of-bounds read is confined to cloning IPComp associations established through the legacy PF_KEY interface, restricting the potential damage to a kernel crash or partial disclosure of slab memory. Standard enterprise environments generally rely on modern Netlink XFRM interfaces rather than PF_KEY, significantly constraining exposure on typical Red Hat Enterprise Linux installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.