{"vulnerability": "CVE-2026-64564", "sightings": [{"uuid": "3bf82ee5-2c9e-442e-a42f-922379112a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97028", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-64564\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-07 12:49:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSCTPhantom (CVE-2026-64564) SCTP ASCONF DEL-IP UAF LPE PoC (Debian 13 6.12.95) \u2014 community PoC mirror, MIT; for authorized security testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T00:06:19.893515Z"}, {"uuid": "7f6d554a-eaaf-49ef-a754-dce612aac1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9744", "content": "\ud83d\uded1 18-year-old Linux kernel flaw could let local users escape containers and reach host root.\n\nCVE-2026-64564 affects Linux SCTP code dating back to 2008. Tencent says SCTPhantom escaped a container and reached host root in 6 of 8 tests.\n\nHow the flaw works: https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html", "creation_timestamp": "2026-08-08T00:06:20.222935Z"}, {"uuid": "8fddbc83-043b-4d80-a5ec-00630985a536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msk3yaxz7s2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 42 interactions\nCVE-2026-64564: 21 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-64564: 20 interactions\nCVE-2026-63077: 5 interactions\nCVE-2026-64561: 4 interactions\n", "creation_timestamp": "2026-08-08T03:12:07.739796Z"}, {"uuid": "ea9c1e41-cd69-4968-952d-533e1acd5fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mskbuysoca2z", "content": "18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on\u00a0Host\n\nA newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even escape containers to compromise the\u2026", "creation_timestamp": "2026-08-08T04:57:41.766700Z"}, {"uuid": "c591f36f-3b69-4d6a-a443-44bf07c101f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "published-proof-of-concept", "source": "Telegram/C3q2vOTdkXA6iF-h_zMGQrZVnDCfVSala-72eNVn5iLBkyI", "content": "", "creation_timestamp": "2026-08-09T00:05:53.471678Z"}, {"uuid": "c2732aba-a2d0-4b09-912f-4385c7fe2e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msmmu4g67x27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 45 interactions\nCVE-2026-64564: 21 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2015-6609: 14 interactions\nCVE-2026-64638: 9 interactions\nCVE-2026-66066: 7 interactions\n", "creation_timestamp": "2026-08-09T03:19:22.110692Z"}, {"uuid": "8e539070-83d7-4740-a791-db71dd1dc41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/55u7vzwmlbett", "content": "CVE-2026-64564: Linux SCTP ASCONF transport UAF leading to local privilege escalation and container escape", "creation_timestamp": "2026-08-06T15:03:12.937380Z"}, {"uuid": "7f742fd6-d8b0-454f-88f1-28499ba9251c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117049246952190178", "content": "Yet another linux LPE to root. \"CVE-2026-64564: Linux SCTP ASCONF transport UAF leading to local privilege escalation and container escape\"\nhttps://www.openwall.com/lists/oss-security/2026/08/06/3\n#CVE_2026_64564 #infosec #cybersecurity", "creation_timestamp": "2026-08-06T15:22:49.995031Z"}, {"uuid": "1089e20b-848b-45f4-8de7-38451cb7c872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117049256416605625", "content": "Debian tracking: https://security-tracker.debian.org/tracker/CVE-2026-64564", "creation_timestamp": "2026-08-06T15:25:14.462307Z"}, {"uuid": "08e529d6-363b-4421-bead-acfd5b4f66e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/bvzzwg2f6updd", "content": "Re: CVE-2026-64564: Linux SCTP ASCONF transport UAF leading to local privilege escalation and container escape", "creation_timestamp": "2026-08-06T16:18:59.887887Z"}, {"uuid": "f77a81ff-ae05-46e0-a0e4-16b61fa44ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117050021839401801", "content": "#Debian stable has a fix now: linux-image-6.12.101+deb13-amd64\n    - sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)\n#CVE_2026_64564", "creation_timestamp": "2026-08-06T18:39:53.937060Z"}, {"uuid": "3452a4de-c51f-4f27-bacb-24c7a1d1ddef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3msihmvetos2v", "content": "Linux SCTP flaw CVE-2026-64564 enables root access and container escapes. Update now. #Linux #SCTP #CVE202664564 #Security #Kernel #Vulnerability #ContainerEscape https://thedailytechfeed.com/18-year-old-linux-sctp-flaw-allows-root-access-and-container-escape/", "creation_timestamp": "2026-08-07T11:35:13.098366Z"}, {"uuid": "4009352d-7b20-40fb-a5d1-b82b16d7c4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9744", "content": "\ud83d\uded1 18-year-old Linux kernel flaw could let local users escape containers and reach host root.\n\nCVE-2026-64564 affects Linux SCTP code dating back to 2008. Tencent says SCTPhantom escaped a container and reached host root in 6 of 8 tests.\n\nHow the flaw works: https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html", "creation_timestamp": "2026-08-07T12:00:04.858188Z"}, {"uuid": "105f6b63-58d2-43eb-a6a5-95b4276bd0b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/eulinuxevolutionde.eurosky.social/post/3msirwc2bt22k", "content": "Linux-SCTP-Schwachstelle CVE-2026-64564: Update f\u00fcr Root- und Container-Escape-Risiko\nwww.it-boltwise.de/linux-sctp-s...\n\n#Linux #LinuxNews #LinuxDE #LinuxNewsDE #LinuxEU #LinuxNewsEU #EULE #EULEde", "creation_timestamp": "2026-08-07T14:39:26.675222Z"}, {"uuid": "4612bd40-22bb-4082-904e-a37206466a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97028", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-64564\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-07 12:49:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSCTPhantom (CVE-2026-64564) SCTP ASCONF DEL-IP UAF LPE PoC (Debian 13 6.12.95) \u2014 community PoC mirror, MIT; for authorized security testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-07T15:08:45.715399Z"}, {"uuid": "cabdedce-4b9b-4f25-8cd6-3e09b034460b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64564", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3msiyfoewdk2z", "content": "CVE-2026-64564 (SCTPhantom) is a use-after-free bug in Linux\u2019s SCTP networking code that can escalate to full root access and container [\u2026]", "creation_timestamp": "2026-08-07T16:35:24.492479Z"}]}