CVE-2026-64147

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference leak occurs in the pds core component during firmware reset recovery. The debugfs lookup() function returns a dentry with an elevated reference count that is not released via dput(). Furthermore, when CONFIG DEBUG FS is disabled, debugfs lookup() returns an error pointer ERR PTR(-ENODEV) instead of NULL. The existing error handling fails to account for this, potentially leading to a system crash when dput() is called on an invalid pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.