CVE-2026-64564 | Linux Kernel up to 7.2-rc4 sctp sctp_process_asconf_param use after free (EUVD-2026-52605)

A vulnerability described as very critical has been identified in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This impacts the function sctp_process_asconf_param of the component sctp. Executing a manipulation can lead to use after free.

This vulnerability appears as CVE-2026-64564. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More