cve 2026 64560

CVE-2026-64560 is a Linux kernel use-after-free race in posix-cpu-timers, not a Windows kernel vulnerability, as clarified in Microsoft's Security Update Guide. The flaw, with total availability impact, was fixed upstream in July and carried into stable Linux releases. For Windows administrators, the concern centers on environments running unpatched Linux kernels, including WSL 2, Linux virtual machines, Azure Linux hosts, Kubernetes nodes, and Linux-container infrastructure. The tag covers guidance on checking WSL 2 and Linux host kernels, understanding the denial-of-service impact, and determining whether Windows cumulative updates are relevant or if Linux kernel updates are required.