PT-2026-64591

CVE-2026-64370

·

Published

2026-07-25

·

Updated

2026-11-03

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A pid refcount leak occurs in the do cpu nanosleep() function. The posix cpu timer create() function acquires a pid reference using get pid() and stores it in timer.it.cpu.pid. If the following posix cpu timer set() call fails, the function returns without executing posix cpu timer del(), which fails to release the pid reference and results in a leak.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-93861
CLSA-2026-1789898700
ECHO-D7F7-A21E-EA97
OPENSUSE-SU-2026:11476-1
SUSE-SU-2026:5091-1
USN-8726-1
USN-8726-2
USN-8726-3
USN-8726-4
USN-8727-1
USN-8728-1
USN-8728-2
USN-8728-3
USN-8760-1
USN-8760-2
USN-8800-1
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8917-1
USN-8918-1
USN-8963-1
Found an issue in the description? Have something to add? Feel free to write us 👾