CVE-2026-64518

kernel: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 29, 2026

Description

A flaw was found in the Linux kernel's TCP implementation. An out-of-bounds access vulnerability exists when the lockdep_sock_is_held() function is called with a tcp_timewait_sock object. This occurs because the tcp_timewait_sock object lacks the necessary sk->sk_lock, leading to an incorrect lockdep annotation. This issue could potentially lead to system instability or other undefined behavior.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write