CVE-2026-64424

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free error exists in the netpoll component during the shutdown path. The issue occurs when a pending TX worker runs in parallel with the cleanup process. Specifically, the netpoll cleanup() function sets dev->npinfo to NULL and calls rcu cleanup netpoll info(), which attempts to cancel workers using cancel delayed work(). However, because it does not wait for the worker to finish before kfree(npinfo) is called, the queue process() function—which is not an RCU reader and accesses npinfo via container of()—may attempt to access the memory after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.