SecurityOnlineDo Son
Critical Linux Kernel SCTP Flaw Lets Attackers Gain Root Access
Part of the CVE-2026-64564 story · since 10 Aug
- Mon 10 Aug, 02:27 UTC. SecurityOnline, first report. Critical Linux Kernel SCTP Flaw Lets Attackers Gain Root Access. This article, 1st of 1.
CVE-2026-64564 is a critical vulnerability in the Linux kernel related to SCTP (Stream Control Transmission Protocol), allowing local attackers to escalate privileges to root and escape from containers. Researchers successfully demonstrated this flaw across five distributions without requiring special privileges, utilizing it through a use-after-free condition when managing peer transports in the SCTP protocol.
The vulnerability affects a wide range of kernel versions dating back to 2.6.25, has a CVSS score of 9.8, and requires immediate patching as the fix has been implemented in several mainline updates. No confirmed exploitation has been recorded yet, but prudent measures include applying the patches and possibly blocking SCTP if not in use.
How the story developed
1 article from 1 outlet since 10 Aug. Quiet since 10 Aug. This was the first report.
- Mon 10 Aug, 02:27 UTC. SecurityOnline, first report. Critical Linux Kernel SCTP Flaw Lets Attackers Gain Root Access. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Mon 10 AugDay 01
- Critical Linux Kernel SCTP Flaw Lets Attackers Gain Root Access02:27 · SecurityOnline · First report · This article, 1st of 1