CVE Database›Document archive›CVE-2026-64563

CVE-2026-64563

kernel: rhashtable: clear stale iter->p on table restart

Loading…

Severity

Important

Red Hat Product Security

7.3

CVSS 3.1

Review impact separately from score.

Published · August 4, 2026

Updated · October 31, 2026

Description

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which may lead to a system crash (Denial of Service) or, in more severe scenarios, allow for unauthorized code execution or information disclosure.

Statement

Red Hat has rated this vulnerability as having an Important security impact because a local authenticated user could trigger a kernel use-after-free condition during hash table walk operations, potentially leading to a system crash or local privilege escalation. In standard Red Hat Enterprise Linux environments, unprivileged local users can access network diagnostic socket interfaces that traverse these kernel tables during multi-part status queries. Because the flaw can be reached without administrative privileges or specialized hardware, the potential blast radius encompasses local system availability and kernel integrity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

CVSS / CWE

CVSS 3.1 · 7.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE-825 · Expired Pointer Dereference