CVE-2026-64436 net: af_key: initialize alg_key_len for IPComp states

🗓️ 25 Jul 2026 08:51:10Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

CVE-2026-64436: Initialize alg_key_len for IPComp state in PF_KEY to fix memory overread on migrate.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-64436	25 Jul 202608:51	–	attackerkb
CVE	CVE-2026-64436	25 Jul 202608:51	–	cve
Cvelist	CVE-2026-64436 net: af_key: initialize alg_key_len for IPComp states	25 Jul 202608:51	–	cvelist
Debian CVE	CVE-2026-64436	25 Jul 202608:51	–	debiancve
EUVD	EUVD-2026-48780	25 Jul 202608:51	–	euvd
NVD	CVE-2026-64436	25 Jul 202610:17	–	nvd
OSV	DEBIAN-CVE-2026-64436	25 Jul 202610:17	–	osv
OSV	ECHO-0115-47FB-5BBC	26 Jul 202602:26	–	osv
Positive Technologies	PT-2026-64657	25 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64436	25 Jul 202615:59	–	susecve

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/01b9115b55018123ef2449ac4951f89147a8428e
git	www.git.kernel.org/stable/c/273c06b81d2e902b21acc801ae18c8276c8a9b69
git	www.git.kernel.org/stable/c/3f63d1752d90c0e28be931a48ab5d89bc97d637d
git	www.git.kernel.org/stable/c/58e82fc3dedb57b1432292504415b224fd2d6acb
git	www.git.kernel.org/stable/c/6de2a650917bedaaefd65b17cede83c5e2c1dedd
git	www.git.kernel.org/stable/c/cea34abc94b0a81e3a8b5cfb41cf45af37c2c67e
git	www.git.kernel.org/stable/c/d129c3177d7b1138fd5066fcc63a698b3ba415b0
git	www.git.kernel.org/stable/c/e8417353cbd078d10531ba3928e609c84ab09e6b
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64436.json

26 Jul 2026 05:17Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.00215

ipcomp pfkey xfrm algorithm alg key length memory safety