PT-2026-64339 · Linux+1 · Linux Kernel+1

CVE-2026-64224

·

Published

2026-07-24

·

Updated

2026-09-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc3
Description A double free issue exists in the octeontx2-pf driver. The function rvu rep rsrc init() allocates queue memory before calling otx2 init hw resources(). If the hardware resource setup fails, otx2 init hw resources() unwinds the partially initialized SQ, CQ, and aura state. Subsequently, the representor error path calls otx2 free hw resources(), which may free the same resources a second time. A double free occurs when the same memory location is freed twice, which can lead to memory corruption or system instability.
Recommendations Update the Linux kernel to version 7.1-rc3 or later.

Exploit

Fix

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-64224
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu