CVE-2026-64022

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.

Rincian

Terbit di NVD

19 Juli 2026

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3e657619cf7258cb53b1beaf0d02998297695cde patch
• https://git.kernel.org/stable/c/61fef83f239ecace1cce716135762a2d9b7b1fc6 patch
• https://git.kernel.org/stable/c/9870ea9a4a25abef3e7af3445bfce2472528a546 patch