OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64370

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of CPU timers, specifically in the `do_cpu_nanosleep()` function, where a PID reference leak occurs if a subsequent timer setup fails. This leak could lead to resource exhaustion over time, potentially impacting system stability and performance. Linux system administrators and developers should prioritize addressing this issue to ensure efficient resource management and prevent potential denial-of-service conditions.

CVE
CVE-2026-64370
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_timer_create() takes a pid reference via get_pid() and stores it in timer.it.cpu.pid. If the subsequent posix_cpu_timer_set() call fails, the function returns immediately without calling posix_cpu_timer_del() to release the pid reference, causing a leak. Fix it by calling posix_cpu_timer_del() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.