CVE-2026-64372

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free and double free issue exists in the pcc cpufreq do osc() function during the two-phase OSC negotiation. The function calls acpi evaluate object() twice; however, after the first call, it frees output.pointer while leaving output.length unchanged. Because acpi evaluate object() interprets a non-zero length with a non-NULL pointer as an existing buffer, the second call writes into memory that has already been freed. Subsequently, the kfree(output.pointer) call at out free attempts to free the same pointer again.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.