CVE-2026-64072

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request.

Rincian

Terbit di NVD

19 Juli 2026

Terakhir diubah

3 September 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/2279cd9c61a330e5de4d6eb0bc422820dd6fdf36 patch
• https://git.kernel.org/stable/c/51ec7fc4e10c5e332bf4007bdb7e4c6bf03c14c9 patch
• https://git.kernel.org/stable/c/fea4b46f84c50caf93c6c0f2a54b1be2edfb4491 patch