CVE-2026-64436 | Linux Kernel up to 7.1.3 PF_KEY IPComp pfkey_msg2xfrm_state out-of-bounds

A vulnerability labeled as problematic has been found in Linux Kernel up to 7.1.3. This vulnerability affects the function pfkey_msg2xfrm_state of the component PF_KEY IPComp Handler. The manipulation results in out-of-bounds read.

This vulnerability is reported as CVE-2026-64436. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.