Security Advisory

CVE-2026-64002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-19 14:56:19
Last updated 2026-07-20 13:42:13
Assigner Linux
CVSS score 7.8
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_reserved_ports too soon. Only after unregister_net_sysctl_table() we can be sure no threads can possibly use the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.