Vulnerability in Linux
CVE-2026-64046
In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 (start != 0) the current code will create a chain link to content type right afte…
EPSS: 0.002 (7.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 9aaaa56845a06aeabdd597cbe19492dc01f281ec, d529d6c9f7e3aaeac13c4948f79799ccb825f29d, 5.4.14
References
Frequently asked questions
- What is CVE-2026-64046?
- CVE-2026-64046 is a critical-severity vulnerability in Linux. CVSS score: 9.8/10. Published 2026-07-19.
- How severe is CVE-2026-64046?
- Critical severity. CVSS v3 base score is 9.8 out of 10.