SCTPhantom Local Privilege Escalation issue
CVE / CVSS
| CVE | CVSS | EPSS | Vector | Source |
|---|---|---|---|---|
| CVE-2026-64564 (opens in a new tab) Debian (opens in a new tab) | CVSS 9.8 Critical | 1.4 % | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD (v3.1) |
Base scores are looked up from NVD or, if NVD has none yet, the CVE record. Proxmox itself does not publish CVSS scores. “Actively exploited” comes from the CISA KEV catalog, EPSS (probability of exploitation in the next 30 days) from FIRST.
Affected packages
proxmox-kernel-*
Details
A use-after-free issue in the Linux kernels SCTP code allowed a unprivileged local attacker to obtain root privileges, and potentially escape from unprivileged containers.
Fixed in
- proxmox-kernel-7.0.14-10-pve(-signed) (Trixie based products)
- proxmox-kernel-6.8.12-41-pve(-signed) (Bookworm based products)
More
Mitigation:
Preventing the sctp module from being loaded mitigates the issue.
References
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.