Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-64002

ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.93, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_reserved_ports too soon. Only after unregister_net_sysctl_table() we can be sure no threads can possibly use the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in ecf45080a4d3f4526cacb8b14060fe3b49a6913b; From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in a0ffc6081a8b27082dd5eae5aa1e3f59bbecf06c; From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in 5b23a2ff379e70b6b9ff744a972b63e1f8f4d996; From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in 8e59d4d0dcde2dfb07a7ef855c849a2a0560aa57; From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in 6512c57c4638ddec113bf42439361ba85a12048d; From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in a7f4eefb6e1458431eef9fa20fb363320d185f76; From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in 155f90be5ee8be5b110ebc0b7da33c54c83b0208; From 122ff243f5f104194750ecbc76d5946dd1eec934 · fixed in 87a1e0fe7776da7ab411be332b4be58ac8840d10

  • Linux Linux

    3.16

  • KernelLinux

    From 3.16.0 · fixed in 5.10.259; From 5.11.0 · fixed in 5.15.210; From 5.16.0 · fixed in 6.1.176; From 6.2.0 · fixed in 6.6.143; From 6.7.0 · fixed in 6.12.93; From 6.13.0 · fixed in 6.18.35; From 6.19.0 · fixed in 7.0.12

References 8

git.kernel.org