Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64414

In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko reports: When an skb with unreadable fragments (such as from devmem TCP, where skb_frags_readable(skb) returns false) is processed by the u32 module, skb_copy_bits() will safely return a negative error code [..] xt_u32: bail out with hotdrop in this case. gather_frags: return -1, just as if we had no fragment header. nfnetlink_queue: restrict to the linear part. nfnetlink_log: res
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:04acccce25a148602a9807a6ac8bfc571786711c60e19fa23821e0949b71e76d
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/netfilter/nf_conntrack_reasm.c","net/netfilter/nfnetlink_log.c","net/netfilter/nfnetlink_queue.c","net/netfilter/xt_u32.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semv…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/netfilter/nf_conntrack_reasm.c","net/netfilter/nfnetlink_log.c","net/netfilter/nfnetlink_queue.c","net/netfilter/xt_u32.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3b13e7635795394705920cca1e1db7e4ca2e334b","status":"affected","version":"65249feb6b3df9e17bab5911ee56fa7b0971e231","versionType":"git"},{"lessThan":"fc5bfe63bacf8a3ae307b62b34206406ca733354","status":"affected","version":"65249feb6b3df9e17bab5911ee56fa7b0971e231","versionType":"git"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/netfilter/nf_conntrack_reasm.c","net/netfilter/nfnetlink_log.c","net/netfilter/nfnetlink_queue.c","net/netfilter/xt_u32.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semv…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/netfilter/nf_conntrack_reasm.c","net/netfilter/nfnetlink_log.c","net/netfilter/nfnetlink_queue.c","net/netfilter/xt_u32.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3b13e7635795394705920cca1e1db7e4ca2e334b","status":"affected","version":"65249feb6b3df9e17bab5911ee56fa7b0971e231","versionType":"git"},{"lessThan":"fc5bfe63bacf8a3ae307b62b34206406ca733354","status":"affected","version":"65249feb6b3df9e17bab5911ee56fa7b0971e231","versionType":"git"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/metrics/0/cvssV3_1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/3b13e7635795394705920cca1e1db7e4ca2e334b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/57056be3ec12e7d9ecd20a60d4060f510e4f284c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/da5b58478a9c1b85608c9e40a3b8432d071b409e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/fc5bfe63bacf8a3ae307b62b34206406ca733354"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e8847774527ef171d7c0866bca5ecd9e10882be43053b4fcf0d000edaeefe741 · sha256:bee8b609c87767c2… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer