CVE-2026-80642

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the liveupdate component where the incoming File-Lifecycle-Bound (FLB) data is not properly reference counted. This occurs when a subsystem needs to retain FLB data for an extended period, such as during device enumeration. Without incrementing the reference count in the liveupdate flb get incoming() function, the FLB structure could be freed while still in use, leading to use-after-free bugs, which happen when a program continues to use a pointer after it has been deleted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.