Review reviewCritical

CVE-2026-64025

Linux

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx sk_psock_strp_data_ready() already checks tls_sw_has_ctx_rx() and defers to psock->saved_data_ready when a TLS RX context is present, avoiding a conflict with the TLS strparser's ownership of the receive queue (commit e91de6afa81c, "bpf: Fix running sk_skb program types with ktls"). sk_psock_verdict_data_ready() has no equivalent guard. When a socket is inserted into a sockmap (BPF_SK_SKB_VERDICT) before TLS RX is configured, tls_sw_strparser_arm() saves sk_psock_ver...

CVSS: 9.8
EPSS: -
CISA KEV: Not listed
Published: 2026.07.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 9.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= ef5659280eb13e8ac31c296f58cfdfa1684ac06b < c9ea01768903ae47f210cd457af1dead6de7a9c3, >= ef5659280eb13e8ac31c296f58cfdfa1684ac06b < 7c8cf21bc4efb4af18d6096db3f8bd06d622251c, >= ef5659280eb13e8ac31c296f58cfdfa1684ac06b < 1861d369efd62d67796563bf3e01fc22e5626f8b, >= ef5659280eb13e8ac31c296f58cfdfa1684ac06b < 8a52139560f833c3975032e1f5762611e3a36d71, >= ef5659280eb13e8ac31c296f58cfdfa1684ac06b < ddf8029623a1af20e984c040e89ff918158397ab, >= 5.10
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: Not available