Vulnerability in Linux

CVE-2026-64046

In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 (start != 0) the current code will create a chain link to content type right afte…

EPSS: 0.002 (7.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 9aaaa56845a06aeabdd597cbe19492dc01f281ec, d529d6c9f7e3aaeac13c4948f79799ccb825f29d, 5.4.14

References

Frequently asked questions

What is CVE-2026-64046?
CVE-2026-64046 is a critical-severity vulnerability in Linux. CVSS score: 9.8/10. Published 2026-07-19.
How severe is CVE-2026-64046?
Critical severity. CVSS v3 base score is 9.8 out of 10.