What is the CVSS score of EUVD-2026-64571?

EUVD-2026-64571 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-64571?

Linux kernel systems are vulnerable to a memory corruption flaw in the tracing subsystem that can cause system crashes or denial of service; no public exploit has been identified at time of analysis.. A patch is available.

How to fix or mitigate EUVD-2026-64571?

Within 24 hours, inventory all Linux systems currently deployed and determine which kernel versions are installed, focusing on production infrastructure. Within 7 days, identify patched kernel versions from your distribution maintainer's security advisory, test patches in non-production environments to confirm compatibility with your workloads, and establish update deployment windows to minimize business impact. Within 30 days, deploy kernel patches to all affected systems and verify successful updates, prioritizing systems with multiple local users or untrusted user bases.

Linux Kernel EUVD-2026-64571

| CVE-2026-74634 HIGH

2026-08-22 Linux

GHSA-cq5j-7xcv-jwf8

Information Disclosure Linux

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local-only vector confirmed by tracefs access requirement; PR:L reflects minimum unprivileged shell needed; high C/I/A reflect kernel use-after-free memory corruption potential.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 25, 2026 - 06:51 vuln.today

CVSS changed

Aug 25, 2026 - 06:22 NVD

7.8 (HIGH)

Patch available

Aug 22, 2026 - 16:01 EUVD

CVE Published

Aug 22, 2026 - 15:32 cve.org

HIGH 7.8

CVE Published

Aug 22, 2026 - 15:32 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Prevent subbuf order change when resizing is disabled

Because ring_buffer_subbuf_order_set() frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free (rb_advance_iter()).

Return -EBUSY on resize_disabled, matching ring_buffer_resize() behaviour.

AnalysisAI

Use-after-free in the Linux kernel's ring-buffer tracing subsystem exposes non-consuming reader iterators to dangling memory when subbuffer order changes occur while resizing is disabled. The vulnerable function ring_buffer_subbuf_order_set() frees buffer pages without checking the resize_disabled flag, leaving rb_advance_iter() holding stale references to freed memory. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon

Gain local low-privilege shell access

Delivery

Access tracefs ring-buffer interface

Exploit

Initiate non-consuming reader iterator via rb_advance_iter()

Install

Trigger ring_buffer_subbuf_order_set() while resize_disabled is set

Use-after-free on freed buffer pages

Execute

Corrupt kernel memory structures

Impact

Escalate privileges to root

Recon

Gain local low-privilege shell access

Delivery

Access tracefs ring-buffer interface

Exploit

Initiate non-consuming reader iterator via rb_advance_iter()

Install

Trigger ring_buffer_subbuf_order_set() while resize_disabled is set

Use-after-free on freed buffer pages

Execute

Corrupt kernel memory structures

Impact

Escalate privileges to root

Vulnerability AssessmentAI

Exploitation	Exploitation requires local system access with at least low-privilege user credentials (confirmed by CVSS PR:L), sufficient to interact with the kernel's tracefs interface (typically /sys/kernel/tracing or /sys/kernel/debug/tracing). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 7.8 score accurately reflects the potential severity of a kernel use-after-free - high confidentiality, integrity, and availability impact - but real-world exploitation probability is low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A local attacker with a standard unprivileged shell account opens a non-consuming read handle against the kernel ring-buffer tracing interface, establishing an active rb_advance_iter() iterator. The attacker then concurrently triggers ring_buffer_subbuf_order_set() while resizing is disabled, causing the kernel to free the buffer pages still referenced by the iterator. …
Remediation	Upgrade to a patched kernel version: 6.12.104, 6.18.45, 7.1.9, or 7.2, as applicable to the deployed stable branch. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all Linux systems currently deployed and determine which kernel versions are installed, focusing on production infrastructure. …

Threat intelligence, references, and detailed analysis are available after sign-in.