type: cve · created: 2026-08-09 · updated: 2026-08-09 · tags: [cve, linux, kernel, container-escape, use-after-free, sctp] · confidence: high · severity: not-rated · affected_sectors: [technology, cloud, infrastructure] · au_impact: true
CVE-2026-64564 — 18-Year-Old Linux SCTP Use-After-Free
CVE-2026-64564 is a use-after-free vulnerability in Linux's SCTP (Stream Control Transmission Protocol) networking code dating to 2008. Discovered by Tencent Zhuque Lab, it allows local users to gain root privileges and escape containers.
Vulnerability Details
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-64564 |
| Type | Use-After-Free → Local Privilege Escalation + Container Escape |
| Affected | Linux kernel (SCTP networking code, dating to 2008) |
| Discovered by | Tencent Zhuque Lab |
| Disclosure | 2026-08-07 |
| Impact | Root access, container escape |
Status
- Fixed in stable kernels: 7.1.6, 6.18.42, 6.12.101, 6.6.148
- Discovered by Tencent Zhuque Lab
- No evidence of active exploitation at time of disclosure
Affected Systems
Any Linux system with SCTP support enabled. The vulnerability has been present in the kernel since approximately 2008, affecting all Linux distributions running kernels predating the fix releases.
Mitigation
- Apply the latest stable kernel updates for your distribution
- If SCTP is not required, disable the SCTP kernel module (
modprobe -r sctp) - Restrict local access to reduce the attack surface for LPE
Related Pages
- Ghostlock Cve 2026 43499 — 15-year-old Linux kernel flaw (similar vintage)
- Cve 2026 8933 Snap Confine — Ubuntu snap-confine LPE (container escape vector)