Answer in brief
CVE-2026-64002 records a Unknown severity vulnerability in ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-64002 records a Unknown severity vulnerability in ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=122ff243f5f104194750ecbc76d5946dd1eec934 <ecf45080a4d3f4526cacb8b14060fe3b49a6913b || >=122ff243f5f104194750ecbc76d5946dd1eec934 <a0ffc6081a8b27082dd5eae5aa1e3f59bbecf06c || >=122ff243f5f104194750ecbc76d5946dd1eec934 <5b23a2ff379e70b6b9ff744a972b63e1f8f4d996 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <8e59d4d0dcde2dfb07a7ef855c849a2a0560aa57 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <6512c57c4638ddec113bf42439361ba85a12048d || >=122ff243f5f104194750ecbc76d5946dd1eec934 <a7f4eefb6e1458431eef9fa20fb363320d185f76 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <155f90be5ee8be5b110ebc0b7da33c54c83b0208 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <87a1e0fe7776da7ab411be332b4be58ac8840d10 | ecf45080a4d3f4526cacb8b14060fe3b49a6913b, a0ffc6081a8b27082dd5eae5aa1e3f59bbecf06c, 5b23a2ff379e70b6b9ff744a972b63e1f8f4d996, 8e59d4d0dcde2dfb07a7ef855c849a2a0560aa57, 6512c57c4638ddec113bf42439361ba85a12048d, a7f4eefb6e1458431eef9fa20fb363320d185f76, 155f90be5ee8be5b110ebc0b7da33c54c83b0208, 87a1e0fe7776da7ab411be332b4be58ac8840d10 |
| Linux/Linuxgeneric | 3.16 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_reserved_ports too soon. Only after unregister_net_sysctl_table() we can be sure no threads can possibly use the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=122ff243f5f104194750ecbc76d5946dd1eec934 <ecf45080a4d3f4526cacb8b14060fe3b49a6913b || >=122ff243f5f104194750ecbc76d5946dd1eec934 <a0ffc6081a8b27082dd5eae5aa1e3f59bbecf06c || >=122ff243f5f104194750ecbc76d5946dd1eec934 <5b23a2ff379e70b6b9ff744a972b63e1f8f4d996 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <8e59d4d0dcde2dfb07a7ef855c849a2a0560aa57 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <6512c57c4638ddec113bf42439361ba85a12048d || >=122ff243f5f104194750ecbc76d5946dd1eec934 <a7f4eefb6e1458431eef9fa20fb363320d185f76 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <155f90be5ee8be5b110ebc0b7da33c54c83b0208 || >=122ff243f5f104194750ecbc76d5946dd1eec934 <87a1e0fe7776da7ab411be332b4be58ac8840d10 | ecf45080a4d3f4526cacb8b14060fe3b49a6913b, a0ffc6081a8b27082dd5eae5aa1e3f59bbecf06c, 5b23a2ff379e70b6b9ff744a972b63e1f8f4d996, 8e59d4d0dcde2dfb07a7ef855c849a2a0560aa57, 6512c57c4638ddec113bf42439361ba85a12048d, a7f4eefb6e1458431eef9fa20fb363320d185f76, 155f90be5ee8be5b110ebc0b7da33c54c83b0208, 87a1e0fe7776da7ab411be332b4be58ac8840d10 |
| Linux/Linuxgeneric | 3.16 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_reserved_ports too soon. Only after unregister_net_sysctl_table() we can be sure no threads can possibly use the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.
Quoted source text, attributed separately from HOL analysis.