CVE-2026-64522Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5e_xfrm_add_state() handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label before taking the eswitch mode block. After tunnel-mode validation was moved earlier, the common success label unconditionally calls mlx5_eswitch_unblock_mode(). For acquire SAs, this decrements esw->offloads.num_block_mode without a matching increment. Return directly after installing the acquire SA offload handle, so only the paths that successfully called mlx5_eswitch_block_mode() call the matching unblock.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-07-25); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-25: 2Mentions · 2026-07-26: 1Patch / Workaround · 2026-07-25: 1Technical Details · 2026-07-25: 107-2507-26
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-252
Disclosure1Patch1
2026-07-261
Disclosure1
Full discourse3 posts
  • VulDB 🛡@vuldb
    Disclosure

    A new vulnerability with increased severity was disclosed for Linux Kernel (CVE-2026-64522) https://vuldb.com/vuln/383317

    Post summary

    A new severity‑enhanced vulnerability (CVE-2026-64522) in the Linux kernel has been disclosed, with a reference link provided, but no PoC, exploit, patch, or detailed technical info is given.

    01010126
    2.3K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-64522 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5e_xfrm_add_state() handles a… https://www.cve.org/CVERecord?id=CVE-2026-64522

    Post summary

    The post reports that CVE-2026-64522 pertaining to an eswitch mode underflow in the Linux kernel has been resolved, providing a brief technical description of the fix but no PoC, exploit, or patch details.

    00000690
    57.9K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Patch

    CVE-2026-64522 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64522

    Post summary

    The snippet announces that CVE-2026-64522, affecting the Linux kernel's net/mlx5e driver, has been resolved, indicating a patch is available, with no PoC, exploit, or active exploitation details provided.

    00000101
    4.1K followersView on X

Explore more