SECUFOCUSNOW
Home›CVE index›CVE-2026-64435
Review reviewHigh

CVE-2026-64435

Linux

In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb_queue_len() readers on audit_queue Multiple readers access audit_queue.qlen via skb_queue_len() without holding the queue lock or using READ_ONCE(), while kauditd writes to this field via the skb_dequeue() → __skb_unlink() path with WRITE_ONCE() protected by a spinlock. This constitutes data races. All affected skb_queue_len(&audit_queue) call sites: - kauditd_thread() wait_event_freezable() condition - audit_receive_msg() AUDIT_GET handler (s.backlog assignment) - audit_receive() backlog check...

CVSS
8.2
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.25
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 8.2

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skb_queue_len() readers on audit_queue Multiple readers access audit_queue.qlen via skb_queue_len() without holding the queue lock or using READ_ONCE(), while kauditd writes to this field via the skb_dequeue() → __skb_unlink() path with WRITE_ONCE() protected by a spinlock. This constitutes data races. All affected skb_queue_len(&audit_queue) call sites: - kauditd_thread() wait_event_freezable() condition - audit_receive_msg() AUDIT_GET handler (s.backlog assignment) - audit_receive() backlog check...

Affected product and versions

Product
Linux
Affected versions
>= 3197542482df22c2a131d4a813280bd7c54cedf5 < 69f98fff30bdaa72b0cb0e7e078ab6456a0a59b0, >= 3197542482df22c2a131d4a813280bd7c54cedf5 < b35597bdae1a5d8395da4b9baa993b9b71f74d68, >= 3197542482df22c2a131d4a813280bd7c54cedf5 < e575dabb805252e3113fdc3f56f6ecacfde422d0, >= 3197542482df22c2a131d4a813280bd7c54cedf5 < 7ff42312ccde549f8c698723822c7db35107a39b, >= 3197542482df22c2a131d4a813280bd7c54cedf5 < a3d85dec60bb0622360fc176b2a51abdbe2ff0ad, >= 3197542482df22c2a131d4a813280bd7c54cedf5 < fe997a84a385f840b593ead92e575503a5046cee, >= 3197542482df22c2a131d4a813280bd7c54cedf5 < c5186201fa7030289cc4fe23fae87a3fcb566856, >= 3197542482df22c2a131d4a813280bd7c54cedf5 < c9a71daaecb2fb1d8c704545cc0b1c920b9bf5d7, >= 4.10
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE
Not available
CVE-2026-64435 — Linux | SECUFOCUS NOW