🟠 High | Source: Microsoft Security Response Center
CVE-2026-64189 is a race condition vulnerability in the Linux kernel’s netfilter ipset subsystem, specifically between dump operations and ip_set_list resize actions. This type of flaw can lead to memory corruption or information disclosure, and is relevant to Azure environments running Linux-based workloads where the kernel netfilter stack is in use. Microsoft has published this advisory through the MSRC, indicating it affects Azure infrastructure or supported Linux guest configurations.
Security Architect’s Take: Review whether your Azure Linux VMs or AKS node pools are running kernel versions affected by this race condition, and prioritise patching through Azure Update Manager or your distribution’s package manager. If running custom or unmanaged kernel builds, validate patch availability from your upstream vendor promptly.
Original advisory: CVE-2026-64189 netfilter: ipset: fix race between dump and ip_set_list resize