PT-2026-46027 · Linux · Linux Kernel
CVE-2026-46264
·
Published
2026-06-03
·
Updated
2026-07-22
CVSS v3.1
8.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the DRM/XE sysfs initialization where a failure in
devm add action or reset() causes a cleanup action to run immediately on a kobject that has not yet been initialized. This sequence can lead to a use-after-free scenario and refcount underflow, as kobject put() is called on an uninitialized object. The flaw is triggered during the execution of the xe sriov pf sysfs init() function. Additionally, an error in the cleanup registration loop incorrectly passed the parent kobject, resulting in memory leaks.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel