cve 2026 64564

CVE-2026-64564 is a Linux kernel vulnerability in the SCTP Dynamic Address Reconfiguration code that can leave a freed network-transport object referenced during ASCONF DEL-IP processing. Microsoft's Security Update Guide lists this CVE, but it is not a Windows kernel vulnerability and no Windows product, servicing build, KB article, or deployment is identified. Windows administrators should note that this flaw does not have a Windows update, and the upstream Linux fix is commit 9b2854f. The tag covers the CVE's details, its relevance to Windows environments, and the distinction between Linux and Windows vulnerabilities.