CVE-2026-64103

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the device removal path of the ISCI driver. The completion tasklet is initialized during isci host alloc() and scheduled via MSI-X and legacy interrupt handlers. Because isci host deinit() does not kill the completion tasklet after the controller is stopped and the source is quiesced, a race condition occurs. This allows a stale callback to dereference the ihost structure and access ihost->smu registers after the host lifetime has ended.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.