What is the CVSS score of CVE-2026-64413?

CVE-2026-64413 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-64413?

Yes, a patch is available for CVE-2026-64413. Update the affected software to the latest version immediately.

Linux CVE-2026-64413

EUVD-2026-48957 HIGH

Use of Uninitialized Resource (CWE-908)

2026-07-25 Linux

GHSA-48r8-x424-wvc7

Information Disclosure Linux

7.0

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 05:50 vuln.today

CVSS changed

Jul 27, 2026 - 05:22 NVD

7.0 (HIGH)

Patch available

Jul 25, 2026 - 11:18 EUVD

CVE Published

Jul 25, 2026 - 08:50 cve.org

HIGH 7.0

CVE Published

Jul 25, 2026 - 08:50 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: zero chainstack array

sashiko reports: looking at ebtables table translation, could a sparse cpu_possible_mask lead to an uninitialized pointer free?

If cpu_possible_mask is sparse (for example, CPU 0 and CPU 2 are possible, but CPU 1 is not), the allocation loop skips CPU 1. If vmalloc_node() fails at CPU 2, the cleanup loop will blindly decrement and call vfree() on newinfo->chainstack[1].

Not a real-world bug, such allocation isn't expected to fail in the first place.

AnalysisAI

Memory corruption in the Linux kernel's netfilter ebtables module can occur from an uninitialized pointer free during chainstack array cleanup. The flaw is triggered only under rare, non-default conditions—a sparse CPU possible mask and a failed memory allocation—making real-world exploitation extremely unlikely. No active exploitation or public exploit is known.

Same weakness CWE-908 – Use of Uninitialized Resource

View all

CVE-2011-1255 CRITICAL POC

9.3

CVE-2024-50302 MEDIUM

5.5

CVE-2024-12085 HIGH POC

7.5

CVE-2021-1104 CRITICAL POC

9.8

CVE-2021-29937 CRITICAL POC

9.8

CVE-2021-29936 CRITICAL POC

9.8

CVE-2021-26305 CRITICAL POC

9.8

CVE-2019-9641 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-64413 vulnerability details – vuln.today

Back

Linux CVE-2026-64413

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Same weakness CWE-908 – Use of Uninitialized Resource

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code