🟠 High | Source: Microsoft Security Response Center
CVE-2026-64577 is a vulnerability in the Linux kernel’s GTP (GPRS Tunnelling Protocol) implementation, specifically in the gtp1u_send_echo_resp() function, where a missing return value check on skb_pull_data() could lead to unsafe memory access. This type of flaw can potentially be exploited to cause system instability or, in worst-case scenarios, allow an attacker to influence kernel memory behaviour. It has been surfaced via Microsoft’s Security Response Centre in the context of Azure, likely affecting Linux-based virtual machines or container hosts running on the platform.
Security Architect’s Take: Review whether your Azure Linux VM or AKS node pool images are running kernel versions affected by this GTP flaw, and prioritise applying kernel patches or updated OS images as soon as they become available from your distribution vendor. If GTP-related kernel modules are not required in your environment, consider disabling or blocklisting them to reduce attack surface.
Original advisory: CVE-2026-64577 gtp: check skb_pull_data() return in gtp1u_send_echo_resp()