CVE-2026-64000 PUBLISHED

net: hsr: fix potential OOB access in supervision frame handling

Assigner: Linux
Reserved: 19.07.2026 Published: 19.07.2026 Updated: 20.07.2026

In the Linux kernel, the following vulnerability has been resolved:

net: hsr: fix potential OOB access in supervision frame handling

Ensure the entire TLV header is linearized before access by adding sizeof(struct hsr_sup_tlv) to the pskb_may_pull() calls. Without this, a truncated frame could cause an out-of-bounds access.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from eafaa88b3eb7f28aecb222281655473431d3ef2e to 09a37dca090c55ffb1a33f52d8667f1c2367ef48 (excl.)
  • affected from eafaa88b3eb7f28aecb222281655473431d3ef2e to a4b64f3e9c7b8259f7dd251a0313420ba7c01852 (excl.)
  • affected from eafaa88b3eb7f28aecb222281655473431d3ef2e to 71c986c0ba45b7dc574fae27c83e7b6671556f37 (excl.)
  • affected from eafaa88b3eb7f28aecb222281655473431d3ef2e to fbd0662f9c9a66e8cc3df3099cca8ed6d3837cc7 (excl.)
  • affected from eafaa88b3eb7f28aecb222281655473431d3ef2e to 78607a6854a22a2502f68092202e75a39af4865d (excl.)
  • affected from eafaa88b3eb7f28aecb222281655473431d3ef2e to f229426072fc865654a60978bb7fda790a051ff3 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.16 is affected
  • unaffected from 0 to 5.16 (excl.)
  • unaffected from 6.1.176 to 6.1.* (incl.)
  • unaffected from 6.6.143 to 6.6.* (incl.)
  • unaffected from 6.12.93 to 6.12.* (incl.)
  • unaffected from 6.18.35 to 6.18.* (incl.)
  • unaffected from 7.0.12 to 7.0.* (incl.)
  • unaffected from 7.1 to * (incl.)

References