CVE-2026-63797

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the rpmsg char component. The rpmsg chrdev probe() function assigns a newly allocated eptdev to the default endpoint's priv pointer before calling rpmsg chrdev eptdev add(). If rpmsg chrdev eptdev add() fails, the error path frees eptdev, but the default endpoint may still trigger callbacks using the now-stale priv pointer. This can affect the rpmsg ept cb() and rpmsg ept flow cb() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.