CVE-2026-64147

MediumCVSS 5.5/10Last modified Aug 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pds_core: fix debugfs_lookup dentry leak and error handling

debugfs_lookup() returns a dentry with an elevated reference count that must be released with dput(). The current code discards the returned dentry without calling dput(), causing a reference leak on every firmware reset recovery.

Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup() returns ERR_PTR(-ENODEV), not NULL. The current check passes for error pointers and would call dput() on an invalid pointer, causing a crash.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 2bbf2b1c20f934a054172175ccbabcc01fe69ef6, < 60ef1675b652e912f3eb064767af4432393291fd; >= bc90fbe0c3182157d2be100a2f6c2edbb1820677, < 26e19622c485e53c3fdb299e822068a0542ddf0c; >= bc90fbe0c3182157d2be100a2f6c2edbb1820677, < 91d13e92b983e6c6d7631012c2e20ae8057de9f2; >= bc90fbe0c3182157d2be100a2f6c2edbb1820677, < d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32; >= bc90fbe0c3182157d2be100a2f6c2edbb1820677, < dc416e32baaeb620b9809e9e25fc7b30889686e9; 3ffe14c36985e3174933127c9efad82ac8f3fefb; >= 6.6.16, < 6.6.142; >= 6.7.4, < 6.8
LinuxLinux6.8

References

Timeline

Published
Jul 19, 2026
Last modified
Aug 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-641487.5In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pCVE-2026-641495.5In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity check into debug code dma_CVE-2026-64156.4The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5CVE-2026-641509.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs QCVE-2026-641518.4In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko poinCVE-2026-641527.8In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed CVE-2026-641538.8In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN ComCVE-2026-641545.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_inCVE-2026-641555.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instaCVE-2026-641565.5In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_write_CVE-2026-641575.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invaCVE-2026-641595.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where i_size > remote_i_size Fix the updat
CVE-2026-64147: Medium severity, CVSS 5.5 | Vulnix