CVE-2026-64599

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13-rc1

Description A double-free issue exists in the amlogic crypto driver. When the meson allocate chanlist() function fails after a partial allocation, it unwinds the allocated state locally. However, the meson crypto probe() function subsequently calls meson free chanlist(), causing per-flow resources to be released twice. This sequence can lead to a slab-use-after-free in kthread destroy worker() when crypto engine exit() is re-entered on a destroyed worker. A slab-use-after-free is a memory corruption error where the system attempts to access a memory location that has already been freed.

Recommendations Update the Linux kernel to version 6.13-rc1 or later. As a temporary workaround, restrict the use of the meson crypto probe() function to minimize the risk of exploitation.