Use-After-Free Vulnerability in Linux Kernel Affecting Memory Management

CVE-2026-64563

What is CVE-2026-64563?

A vulnerability exists within the Linux kernel related to the handling of rhashtable during memory management processes. Specifically, when iterating through rhashtable, there are circumstances where stale pointers are not cleared adequately on table restarts. This oversight can lead to dereferencing a freed memory location, which may cause instability and crashes in systems that rely on multi-fragment rhashtable walks. Notable operations affected by this vulnerability include netlink_diag and TIPC, posing a risk to system integrity and security protocols.

References