CVE-2026-64246
Last modified
CVE-2026-64246 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() Move of_node_put(dn) after the of_match_node() call, which still needs the node pointer. The node reference is correctly released after use.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() Move of_node_put(dn) after the of_match_node() call, which still needs the node pointer. The node reference is correctly released after use.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= e2f471efe1d607a7aff38ce53ec717cebe4283d6, < 93c7ee139721936b6fa717572e74d3994603ae13; >= e2f471efe1d607a7aff38ce53ec717cebe4283d6, < cdda7d384c05485a232ae9a849f6445accb095bf; >= e2f471efe1d607a7aff38ce53ec717cebe4283d6, < c04d606f8b35ee7d3ed243f63893a607e9d6c0bc; >= e2f471efe1d607a7aff38ce53ec717cebe4283d6, < 3928ae803dee044b01076c478c279c0bd54164cd; >= e2f471efe1d607a7aff38ce53ec717cebe4283d6, < 2205275be9be981e70ff29610b0117d8853fac70; >= e2f471efe1d607a7aff38ce53ec717cebe4283d6, < d109e72f3fbccb540473285d17d7519584f7f76e; >= e2f471efe1d607a7aff38ce53ec717cebe4283d6, < 8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd |
| Linux | Linux | 5.15 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-64246?
How severe is CVE-2026-64246?
How do I fix CVE-2026-64246?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-64240In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64241In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64242In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64243In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-64244In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64245In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64247In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-64248In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64249In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64250In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2026-64251In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-64252In the Linux kernel, the following vulnerability has been re…5.5
Are you affected by CVE-2026-64246?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
