Vulnary
← back to the feed
Critical· 9.8official fix available

CVE-2026-64007

CVE-2026-64007 is a critical Linux kernel vulnerability in the synproxy module where improper handling of TCP checksums after memory expansion could lead to memory corruption or packet integrity issues. The fix involves updating the kernel to re-derive the TCP header pointer after memory operations to ensure correct checksum calculations.

publishedJul 19, 2026
last modifiedJul 30, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
41th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 19, 2026

An official fix is available, so this entry is kept for 30 days and then removed automatically.

01

Who is affected

Linux kernel users (no specific CPEs listed)

02

Real-world impact

Could allow attackers to corrupt memory or bypass security checks via malformed packets

03

Why this severity

CVSS 9.8 (critical): High risk of memory corruption or packet forgery

04

What to do about it

official fix available
recommended steps
  1. 011. Apply the Linux kernel patch for CVE-2026-64007
  2. 022. Upgrade to a kernel version that includes this fix
  3. 033. Reboot the system to ensure the patch is loaded

NVD-referenced kernel patch

05

Timeline

  1. Jul 19, 2026 · 14d ago
    Published
    Disclosed and added to the National Vulnerability Database.
  2. Jul 20, 2026 · 13d ago
    Official fix available
    A vendor patch or mitigation now exists — see the remediation steps above.
  3. Jul 30, 2026 · 3d ago
    Advisory updated
    The NVD record was last revised.
06

How it’s attacked

Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07

References & advisories

NVD advisory ↗Search advisories ↗
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →