CVE-2026-64417

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the debugfs implementation of the memory management shrinker. The function shrinker debugfs add() unconditionally creates count and scan debugfs files, assuming that every shrinker implements both count objects() and scan objects() callbacks. If a shrinker omits one of these callbacks, such as the xen-backend shrinker which leaves scan objects() as NULL, writing to the corresponding debugfs file triggers a call through a NULL function pointer, resulting in a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.