Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64004

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucv_sock_setsockopt() and wrap the whole switch in lock_sock()/release_sock(). The pre-existing SO_MSGLIMIT-only lock becomes redundant and is removed. Any AF_IUCV HIPER user can potentially crash the kernel by racing recvmsg() with getsockopt(SO_MSGSIZE): the SO_MSGSIZE arm dereferences iucv->hs_dev->mtu after iucv_sock_close() (called from the racing recvmsg()) has set hs_dev to
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c9838d90cab10288ebe3ee06a6cdf89e530fa6046d8ced8ab67bd6964ff4aca4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/iucv/af_iucv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.4"},{"lessThan":"3.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEq…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/iucv/af_iucv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"884eb247b74d86db97e3a37f0d6fc8e1e83590dd","status":"affected","version":"51363b8751a673a00ad48eea895266396d53fa52","versionType":"git"},{"lessThan":"45bb8de8c95d8899f4b8f61bd9bceb8132af73cb","status":"affected","version":"51363b8751a673a00ad48eea895266396d53fa52","versionType":"git"},{"lessThan":"1fc30bd4e55e2dd622d2d366cecd732c1841bbee","status":"affected","version":"51363b8751a673a00ad48eea895…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/iucv/af_iucv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.4"},{"lessThan":"3.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEq…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/iucv/af_iucv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"884eb247b74d86db97e3a37f0d6fc8e1e83590dd","status":"affected","version":"51363b8751a673a00ad48eea895266396d53fa52","versionType":"git"},{"lessThan":"45bb8de8c95d8899f4b8f61bd9bceb8132af73cb","status":"affected","version":"51363b8751a673a00ad48eea895266396d53fa52","versionType":"git"},{"lessThan":"1fc30bd4e55e2dd622d2d366cecd732c1841bbee","status":"affected","version":"51363b8751a673a00ad48eea895…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1fc30bd4e55e2dd622d2d366cecd732c1841bbee"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/3589d20a666caf30ad100c960a2de7de390fce88"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/45bb8de8c95d8899f4b8f61bd9bceb8132af73cb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/69554adc7a6fa04ede3ad7512321d83748e3c920"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/6e792b8dd3002bbc4136745928a9605df1a72b8a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/884eb247b74d86db97e3a37f0d6fc8e1e83590dd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/9817369243380e287ebe5525411557eaa3aa2a79"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/cd691beafea0dd779e69e81ccc26b0ab50efcb5e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48ebe46304cf9e6903e30bfc05682cdbab99e00616b1cb2031a8fd18087dc9ef · sha256:932c1cc530b7ff43… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer