🟠 High | Source: Microsoft Security Response Center
CVE-2026-64188 is a use-after-free vulnerability in the Linux kernel’s Qualcomm RmNet network driver, specifically in the rmnet_dellink() function. Use-after-free flaws occur when a programme continues to reference memory after it has been freed, potentially allowing an attacker to execute arbitrary code or cause a system crash. This vulnerability has been flagged by Microsoft’s Security Response Centre in the context of Azure, suggesting it affects Linux-based virtual machines or infrastructure running on Azure.
Security Architect’s Take: Review any Azure Linux VM or AKS node pool workloads running kernels with the Qualcomm RmNet driver exposed, and prioritise patching to the remediated kernel version as soon as it is available via your distribution’s update channel. Assess whether your threat model includes local privilege escalation paths, as use-after-free vulnerabilities of this type are frequently exploited for kernel-level privilege escalation.
Original advisory: CVE-2026-64188 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()