CVE-2026-64033 Linux CVE debrief

Who should care

System administrators and security teams responsible for Linux kernel-based systems, especially those utilizing RDMA/rtrs, should be aware of this vulnerability and apply the necessary patches to prevent potential exploitation.

Technical summary

The vulnerability is located in the RDMA/rtrs subsystem of the Linux kernel. During the error path of rtrs_srv_create_path_files(), kobject_put(&srv_path->kobj) is called before rtrs_srv_destroy_once_sysfs_root_folders(srv_path). This can lead to srv_path being freed prematurely, causing a use-after-free when rtrs_srv_destroy_once_sysfs_root_folders(srv_path) accesses srv_path->srv. The fix reorders these operations to ensure srv_path's validity during access.

Defensive priority

High priority for systems utilizing RDMA/rtrs due to potential for local exploitation.

Recommended defensive actions

• Apply the official kernel patch to update the RDMA/rtrs subsystem.
• Review system configurations for RDMA/rtrs usage.
• Perform vulnerability scanning to identify affected systems.
• Implement compensating controls to monitor for suspicious activity.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record was published on 2026-07-19T16:17:43.493Z and has not been modified since then. The NVD entry is currently Received. Multiple source references are provided, including links to the Linux kernel stable repository.

Official resources