Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64123

In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcu_read_lock(). They walk hsr->node_db through hsr_get_next_node() and hsr_get_node_data(), but RTM_DELLINK teardown removes the same node table with plain list_del() and frees each node immediately. That lets a generic-netlink reader hold a struct hsr_node pointer across hsr_dellink(). In a KASAN build,
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d4dd3f5f3a0810aa396a1c68f35f2be234ff309b171961ec94ff0114bfa2abeb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/hsr/hsr_framereg.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/hsr/hsr_framereg.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0ea70fb46940620848c08d9d399455c9e82fecdb","status":"affected","version":"b9a1e627405d68d475a3c1f35e685ccfb5bbe668","versionType":"git"},{"lessThan":"8be6685cdd1255bcc85f9b59e4bfc313aefc5c1b","status":"affected","version":"b9a1e627405d68d475a3c1f35e685ccfb5bbe668","versionType":"git"},{"lessThan":"c5580114e0492bcd2e0a37613ed4c311e3fa3d4d","status":"affected","version":"b9a1e627405d68d475a3c1f…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/hsr/hsr_framereg.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/hsr/hsr_framereg.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0ea70fb46940620848c08d9d399455c9e82fecdb","status":"affected","version":"b9a1e627405d68d475a3c1f35e685ccfb5bbe668","versionType":"git"},{"lessThan":"8be6685cdd1255bcc85f9b59e4bfc313aefc5c1b","status":"affected","version":"b9a1e627405d68d475a3c1f35e685ccfb5bbe668","versionType":"git"},{"lessThan":"c5580114e0492bcd2e0a37613ed4c311e3fa3d4d","status":"affected","version":"b9a1e627405d68d475a3c1f…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/0ea70fb46940620848c08d9d399455c9e82fecdb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/6324423a8e6591f41a16c09a8f9a84e554ac147c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/7713f4aafb577ff49fa67f0488d9c7dddc64d6ce"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/8be6685cdd1255bcc85f9b59e4bfc313aefc5c1b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/8c3af18bb0d7c921a5219194037509463eb2ffde"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/aaec7096f9961eb223b5b149abe9495525c205d9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/c5580114e0492bcd2e0a37613ed4c311e3fa3d4d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7beb3c33a4ecd97ba6e3d02daec59b25155bea9566d901967b45a8e25e5245c4 · sha256:39305cdee725ae6d… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer