SECUFOCUSNOW
Home›CVE index›CVE-2026-64113
Review reviewCritical

CVE-2026-64113

Linux

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames whose source MAC matches the VF's own address (VEPA multicast workaround) by freeing the skb and continuing to the next descriptor: dev_kfree_skb_irq(skb); continue; The skb pointer is declared outside the while loop and persists across iterations. Because the continue skips the "skb = NULL" reset at the bottom of the loop, the next iteration enters the "else if (skb)" path and calls ixgbevf_add_rx_frag() on the freed skb, dere...

CVSS
9.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 9.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames whose source MAC matches the VF's own address (VEPA multicast workaround) by freeing the skb and continuing to the next descriptor: dev_kfree_skb_irq(skb); continue; The skb pointer is declared outside the while loop and persists across iterations. Because the continue skips the "skb = NULL" reset at the bottom of the loop, the next iteration enters the "else if (skb)" path and calls ixgbevf_add_rx_frag() on the freed skb, dere...

Affected product and versions

Product
Linux
Affected versions
>= bad17234ba702a50aeec50ab04724ee58af89607 < 3d931ac62411a7e43b85dba5fe45e1a4a91bd5cb, >= bad17234ba702a50aeec50ab04724ee58af89607 < 6ef30384a50a50e4a484cddf341bc27de31aa3de, >= bad17234ba702a50aeec50ab04724ee58af89607 < 55b3e91d62b2f7a24109b2d7c9f4c66d2e3b1ec1, >= bad17234ba702a50aeec50ab04724ee58af89607 < add70e2682c0ad3be2a5810bcf1bc13963ba4df9, >= bad17234ba702a50aeec50ab04724ee58af89607 < a244395d8c563ed1bb26c3ef708db6aeeaa08084, >= bad17234ba702a50aeec50ab04724ee58af89607 < dfef79e09ed2f5df975c98547f97f5d7f8982a24, >= bad17234ba702a50aeec50ab04724ee58af89607 < e8768bcbe5cd30c4ea36a22022c9ffaa66903693, >= bad17234ba702a50aeec50ab04724ee58af89607 < 5d49b568c188dc77199d8d2b959c91da8cc27cf1, >= 3.19
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2026-64113 — Linux | SECUFOCUS NOW