Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2026-64024: Linux kernel packages could let attackers gain unauthorized access
CVE-2026-64024 · published today
Summary
Several Linux kernel packages, including the standard Linux kernel, BellSoft long‑term support kernels, Debian rootio‑linux, and Canonical HWE and AWS kernels, are affected. The flaw could let a malicious user gain unauthorized access to the system. Install the latest kernel updates from your distribution’s package source as soon as possible to protect your servers.
What to do
- Update bellsoft linux-lts to version 6.18.35-r1.
- Update debian rootio-linux to version 6.12.96-1.aikido.154.
- Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1016.16~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-28.28.1~24.04.3.
- Update canonical linux to version 7.0.0-28.28.
- Update canonical linux-aws to version 7.0.0-1009.9.
- Update canonical linux-azure to version 7.0.0-1010.10.
- Update canonical linux-azure-fde to version 7.0.0-1009.9.
- Update canonical linux-gcp to version 7.0.0-1008.8.
- Update canonical linux-gke to version 7.0.0-1003.4.
- Update canonical linux-ibm to version 7.0.0-1010.10.
- Update canonical linux-nvidia to version 7.0.0-1016.16.
- Update canonical linux-nvidia-bos to version 7.0.0-2016.16.
- Update canonical linux-oem-7.0 to version 7.0.0-1009.9.
- Update canonical linux-oracle to version 7.0.0-1008.8.
- Update canonical linux-raspi to version 7.0.0-1015.15.
- Update canonical linux-realtime to version 7.0.0-28.28.1.
- Update canonical linux-riscv to version 7.0.0-28.28.1.
- Update debian linux to version 7.0.12-1.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update linux kernel to version 7.0.11.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux linux to version e47f7060eaf60894e3e4d0e3c4fe6e1f2eacfbdd or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux |
< e47f7060eaf60894e3e4d0e3c4fe6e1f2eacfbdd 6.10 |
| Alpaquita:25 | bellsoft | linux-lts | >= 6.12.95-r0 |
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.92-r1, < 6.18.35-r1 Fix: upgrade to 6.18.35-r1
|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.96-1.aikido.154 Fix: upgrade to 6.12.96-1.aikido.154
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
Showing 50 of 135. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-28.28~24.04.1 Fix: upgrade to 7.0.0-28.28~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1016.16~24.04.1 Fix: upgrade to 7.0.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-28.28.1~24.04.3 Fix: upgrade to 7.0.0-28.28.1~24.04.3
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-28.28 Fix: upgrade to 7.0.0-28.28
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1003.4 Fix: upgrade to 7.0.0-1003.4
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1016.16 Fix: upgrade to 7.0.0-1016.16
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2016.16 Fix: upgrade to 7.0.0-2016.16
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Debian:13 | debian | linux | All versions |
| Debian:14 | debian | linux |
< 7.0.12-1 Fix: upgrade to 7.0.12-1
|
| Linux | linux | kernel |
>= 6.19.0, < 7.0.11 Fix: upgrade to 7.0.11
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| – | linux | linux_kernel |
>= 6.10, < 6.18.34 >= 6.19, < 7.0.11 7.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
Original advisory text
CVE-2026-64024 in linux - Patched by Root
Root has patched CVE-2026-64024 in the linux package for Root:Debian:13. Multiple fixed versions available.
References
- https://ubuntu.com/security/CVE-2026-64024 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-64024 Third Party Advisory
- https://git.kernel.org/linus/1bbf0ced1d9db73ac7893c2187f3459288603e0d Third Party Advisory
- https://ubuntu.com/security/notices/USN-8593-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8603-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8618-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8663-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8664-1 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-64024 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-64024 Vendor Advisory
- https://git.kernel.org/stable/c/1bbf0ced1d9db73ac7893c2187f3459288603e0d
- https://git.kernel.org/stable/c/4affe063fa56c880cbea8d0bfded0bb80751579d
- https://git.kernel.org/stable/c/e47f7060eaf60894e3e4d0e3c4fe6e1f2eacfbdd
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64024... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-64024 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-401Memory Leak
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen19 Jul 2026
Sources
CVE-2026-64024 · OSV
BELL-CVE-2026-64024 · OSV
CVE-2026-64024 · NVD
CVE-2026-64024 · MITRE
DEBIAN-CVE-2026-64024 · OSV
UBUNTU-CVE-2026-64024 · OSV
Track software like this
Free during beta