CVE-2026-64464
Last modified
CVE-2026-64464 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and uses it to build the returned sg_table with sg_alloc_table_from_pages(). The error paths free the pages array, but the success path returns the sg_table without freeing it. This leaks the temporary array every time a sideband client gets an endpoint or event ring buffer. Free the pages array after sg_alloc_table_from_pages() succeeds. The returned sg_table has its own scatterlist entries and does not depend on the temporary array after construction..
Description
In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and uses it to build the returned sg_table with sg_alloc_table_from_pages(). The error paths free the pages array, but the success path returns the sg_table without freeing it. This leaks the temporary array every time a sideband client gets an endpoint or event ring buffer. Free the pages array after sg_alloc_table_from_pages() succeeds. The returned sg_table has its own scatterlist entries and does not depend on the temporary array after construction.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= de66754e9f8029f8ae955a588959b99cab56b506, < 99d00a9e35e311a91d258029d5bb584377296c34; >= de66754e9f8029f8ae955a588959b99cab56b506, < a3eaf82ff842d6ca95937ea584417e04828235a6; >= de66754e9f8029f8ae955a588959b99cab56b506, < 49f6e3c3ef19f04f6657ed8dce550e36c763abb8 |
| Linux | Linux | 6.16 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-64464?
How severe is CVE-2026-64464?
How do I fix CVE-2026-64464?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-64459In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-6446The My Social Feeds – Social Feeds Embedder plugin for WordP…5.4
- CVE-2026-64460In the Linux kernel, the following vulnerability has been re…7
- CVE-2026-64461In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64462In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64463In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-64465In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64466In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64467In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-64468In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-64469In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-6447The Call for Price for WooCommerce plugin for WordPress is v…4.4
Are you affected by CVE-2026-64464?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST