Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64046

In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 (start != 0) the current code will create a chain link to content type right after the wrap link: This would create a chain where the wrap link points directly to another chain link. The scatterlist API sg_next iterator does not recursively resolve consecutive chain links. meaning this is illegal input to crypto. The wrapping link
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:05951c09cd94f6df202491e157a1a576c1419f5b9b677b2573b35f124f5aa99f
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/tls/tls_sw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqua…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/tls/tls_sw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"49a5faaa471ddcd37b6893970c9916eb836e7c31","status":"affected","version":"9aaaa56845a06aeabdd597cbe19492dc01f281ec","versionType":"git"},{"lessThan":"91359966e247c0244c66d50bbb8e74aefa4321c3","status":"affected","version":"9aaaa56845a06aeabdd597cbe19492dc01f281ec","versionType":"git"},{"lessThan":"410351158dfef2d67fea6603680b3a6013c6ed9d","status":"affected","version":"9aaaa56845a06aeabdd597cbe1949…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/tls/tls_sw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqua…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/tls/tls_sw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"49a5faaa471ddcd37b6893970c9916eb836e7c31","status":"affected","version":"9aaaa56845a06aeabdd597cbe19492dc01f281ec","versionType":"git"},{"lessThan":"91359966e247c0244c66d50bbb8e74aefa4321c3","status":"affected","version":"9aaaa56845a06aeabdd597cbe19492dc01f281ec","versionType":"git"},{"lessThan":"410351158dfef2d67fea6603680b3a6013c6ed9d","status":"affected","version":"9aaaa56845a06aeabdd597cbe1949…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/410351158dfef2d67fea6603680b3a6013c6ed9d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/49a5faaa471ddcd37b6893970c9916eb836e7c31"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/91359966e247c0244c66d50bbb8e74aefa4321c3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/929b1548e63ac72e104c07d8ee8cbbeeba2fa89a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/acdc12b71c9aa4be5dcd2c8062753c6d2033e235"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/af855f4c966afafef74faf8390c7b86568c0d46d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b9c015ef1a7bf1e8dc67f21c6381f36deb2c3a36"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ff26a0e8377dec07e4a7230db7675bed1b9a6d03"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:94bceb75b149854ec7312192cfbe1de12253659b736d0305044a0f5aa5751f34 · sha256:4db04af76c7e5719… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer