Log in Start free

Vulnerability · Published Jul 25, 2026 · Assigned by Linux

CVE-2026-64414netfilter: handle unreadable frags

High 7.5

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 61.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko reports: When an skb with unreadable fragments (such as from devmem TCP, where skb_frags_readable(skb) returns false) is processed by the u32 module, skb_copy_bits() will safely return a negative error code [..] xt_u32: bail out with hotdrop in this case. gather_frags: return -1, just as if we had no fragment header. nfnetlink_queue: restrict to the linear part. nfnetlink_log: restrict to the linear part. v2: - skb_zerocopy helpers don't copy readable flag, i.e. nfnetlink_queue is broken too xt_u32 shouldn't return true if hotdrop was set.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10kernel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-debug6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-debug-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-abi-stablelists6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-cross-headers6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-devel-matched6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-doc6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-headers6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-debug6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-debug-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-tools6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-tools-libs6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-uki-virt6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-zfcpdump6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10libperf6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10perf6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10python3-perf6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10rtla6.12.0-211.56.1.el10_2ALSA-2026:68507
AlmaLinux:10rv6.12.0-211.56.1.el10_2ALSA-2026:68507
Debian:13linux6.12.96-1DEBIAN-CVE-2026-64414
Debian:14linux7.1.4-1DEBIAN-CVE-2026-64414
Debian:12linux-6.126.12.100-1~deb12u1DEBIAN-CVE-2026-64414
Rocky Linux:10kernel0:6.12.0-211.56.1.el10_2.0.1RLSA-2026:68507
Ubuntu:26.04:LTSlinux7.0.0-31.31UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-aws7.0.0-1012.12UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-aws-7.07.0.0-1012.12~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-azure7.0.0-1014.14UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1014.14~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1013.13UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-gcp7.0.0-1011.11UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-gke7.0.0-1006.7UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-31.31~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-ibm7.0.0-1013.13UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1018.18UBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1018.18~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2018.18UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1013.13UBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-oracle7.0.0-1011.11UBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-raspi7.0.0-1019.19UBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-realtime7.0.0-31.31.1UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64414
Ubuntu:26.04:LTSlinux-riscv7.0.0-31.31.1UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-64414
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-31.31.1~24.04.1UBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-64414
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-64414

Affected products (as reported)

VendorProductVersions
Linux Linux 65249feb6b3df9e17bab5911ee56fa7b0971e231 – before 3b13e7635795394705920cca1e1db7e4ca2e334b65249feb6b3df9e17bab5911ee56fa7b0971e231 – before fc5bfe63bacf8a3ae307b62b34206406ca73335465249feb6b3df9e17bab5911ee56fa7b0971e231 – before 57056be3ec12e7d9ecd20a60d4060f510e4f284c65249feb6b3df9e17bab5911ee56fa7b0971e231 – before da5b58478a9c1b85608c9e40a3b8432d071b409e
Linux Linux 6.12

References