Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). lockdep_sock_is_held() was added in tcp_ao_established_key() by the cited commit. It can be called from tcp_v[46]_timewait_ack() with twsk. Since it does not have sk->sk_lock, the lockdep annotation results in out-of-bound access. $ pahole -C tcp_timewait_sock vmlinux | grep size /* size: 288, cachelines: 5, members: 8 */ $ pahole -C sock vmlinux | grep sk_lock socket_lock_t sk_lock; /* 440 192 */ Let's not use lockdep_sock_is_held() for TCP_TIME_WAIT.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-64518 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). lockdep_sock_is_held() was a… https://www.cve.org/CVERecord?id=CVE-2026-64518
Post summary
CVE-2026-64518 is an out‑of‑bounds bug in the Linux kernel that has been fixed; technical details are provided, but no PoC, exploit, or active exploitation is reported.
🚨*CVE* CVE-2026-64518 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). lockdep_sock_is_held() was a… https://www.cve.org/CVERecord?id=CVE-2026-64518 ----- Traducción: CVE-2026-64518 En … http://infoflow.cloud`
Post summary
CVE‑2026‑64518, an out‑of‑bounds access issue in the Linux kernel, has been resolved; no PoC, exploit or active exploitation is reported.
CVE-2026-64518 In the Linux kernel, the following vulnerability has been resolved: tcp https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64518
Post summary
The post announces that CVE-2026-64518 has been resolved in the Linux kernel, but provides no additional details or explicit patch information.