CVE-2026-64418

HIGH 7.8 ALL-YEARS

Published 2026-07-25 · Last modified 2026-08-17 · Linux · NVD: Analyzed

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race with expansion expand_shrinker_info() iterates all visible memcgs under shrinker_mutex, including memcgs that have not finished ->css_online() yet. Once pn->shrinker_info has been published, teardown must stay serialized with expand_shrinker_info() until that memcg is either fully online or no longer visible to iteration. Today alloc_shrinker_info() breaks that rule by dropping shrinker_mutex before freeing a partially initialized shrinker_info array, which may cause the following race: CPU0 CPU1 ==== ==== css_create --> list_add_tail_rcu(&css->sibling, &parent_css->children); online_css --> mem_cgroup_css_online --> alloc_shrinker_info --> alloc node0 info rcu_assign_pointer(C->node0->shrinker_info, old0) alloc node1 info -> FAIL -> goto err mutex_unlock(shrinker_mutex) shrinker_alloc() --> shrinker_memcg_alloc --> mutex_lock(shrinker_mutex) expand_shrinker_info --> mem_cgroup_iter see the memcg expand_one_shrinker_info --> old0 = C->node0->shrinker_info memcpy(new->unit, old0->unit, ...);

ELEVATED IMPACT

Severe if exploited (CVSS 7.8), but no confirmed exploitation. Patch on a normal cadence.

Exploitation likelihood

0.1%chance of exploitation in 30 days · 1st percentile

○ In CISA KEV○ Catalogued PoC

Impact if exploited

7.8CVSS 3.1 · HIGH · CNA

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

What an attacker needs

⚠Access: Requires local access to the host
⚠Privileges: Requires a low-privilege account
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Linux

Products Linux Linux Kernel

Weakness (CWE)

CWE-362: Race condition

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References and research data (JSON)

Vendor product assessments

Showing 32 of 507 vendor product statements; 475 omitted. Read the full vendor advisory.

kernel-64k-debug-debuginfo-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-debuginfo-0:6.12.0-211.50.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-tools-debuginfo-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
python3-perf-0:6.12.0-211.50.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-64k-core-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-debug-core-0:6.12.0-211.50.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-debuginfo-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-modules-extra-matched-0:6.12.0-211.50.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-uki-virt-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
python3-perf-debuginfo-0:6.12.0-211.50.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-debuginfo-0:6.12.0-211.50.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
python3-perf-debuginfo-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-modules-extra-0:6.12.0-211.50.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-64k-debug-modules-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-debug-modules-core-0:6.12.0-211.50.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
python3-perf-debuginfo-0:6.12.0-211.50.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10) · fixed

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]_2?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Vendor guidance
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
python-perf as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/python-perf
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-debug as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-debug
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel.src as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel?arch=src
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug-modules-internal
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-debug-kvm
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-tools-libs as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-tools-libs
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-64k as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-64k
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-64k-modules as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-64k-modules
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-debug-modules-core as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug-modules-core
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-modules-extra
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-64k-debug-modules-extra
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-debug-devel
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-rt-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-modules-extra
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-zfcpdump-devel
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
rv as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/rv
Red Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00

Known Affected Software Configurations

Vendor	Product	Version range
Linux	Linux Kernel	≥ 6.7 and < 6.12.96
Linux	Linux Kernel	≥ 6.13 and < 6.18.39
Linux	Linux Kernel	≥ 6.19 and < 7.1.4
Linux	Linux Kernel	7.2
Linux	Linux Kernel	7.2

All CVSS metrics

HIGH 7.8 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
HIGH 7.8 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Patches & mitigations

https://git.kernel.org/stable/c/b9a280a9a454ed514636351d53fe2a233dc5054b PatchCVE record · Linux · Updated 2026-08-17T04:55:17.788Z
NVD · CVE-2026-64418 · Updated 2026-09-04T15:24:49.577
https://git.kernel.org/stable/c/6465ff3ce65131c774a312d450abe10f4b9f3875 PatchCVE record · Linux · Updated 2026-08-17T04:55:17.788Z
NVD · CVE-2026-64418 · Updated 2026-09-04T15:24:49.577
https://git.kernel.org/stable/c/284c267f013e45d8c89d9fb9373105dc8e6c0947 PatchCVE record · Linux · Updated 2026-08-17T04:55:17.788Z
NVD · CVE-2026-64418 · Updated 2026-09-04T15:24:49.577
https://git.kernel.org/stable/c/65476d31d8056e859c48580f82295ce159196ffe PatchCVE record · Linux · Updated 2026-08-17T04:55:17.788Z
NVD · CVE-2026-64418 · Updated 2026-09-04T15:24:49.577

Advisories

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64418.json vendor-advisoryRed Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48962 ADVISORYEUVD · EUVD-2026-48962

Technical & other

https://access.redhat.com/security/cve/CVE-2026-64418 vendor-referenceRed Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
https://bugzilla.redhat.com/show_bug.cgi?id=2507285 vendor-referenceRed Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
https://www.cve.org/CVERecord?id=CVE-2026-64418 vendor-referenceRed Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
https://nvd.nist.gov/vuln/detail/CVE-2026-64418 vendor-referenceRed Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
https://lore.kernel.org/linux-cve-announce/2026072533-CVE-2026-64418-4aed@gregkh/T vendor-referenceRed Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00
https://access.redhat.com/errata/RHSA-2026:61887 vendor-remediationRed Hat · CVE-2026-64418 · Updated 2026-09-01T14:16:59+00:00

Sources: NVD · CVE.org · All sources and attribution · EPSS