PT-2026-64591 · Linux · Linux

CVE-2026-64370 · Published 2026-07-25 · Updated 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: Fix pid refcount leak in do cpu nanosleep() error path

In do cpu nanosleep(), posix cpu timer create() takes a pid reference via get pid() and stores it in timer.it.cpu.pid. If the subsequent posix cpu timer set() call fails, the function returns immediately without calling posix cpu timer del() to release the pid reference, causing a leak.

Fix it by calling posix cpu timer del() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.

Related Identifiers

CVE-2026-64370

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-64370 · Security Note
• https://git.kernel.org/stable/c/7776f9226e99eb49d97492b0b445027cfcb189da · Note
• https://git.kernel.org/stable/c/eb4cec29a78334d09bcfb41c0660cdd62ba05843 · Note
• https://git.kernel.org/stable/c/8a270b1258797f61b61da44f8bfd41a581b5c85b · Note
• https://git.kernel.org/stable/c/87bd2ad568e15b90d5f7d4bcd70342d05dad649c · Note
• https://git.kernel.org/stable/c/8f06363446c5d043c9a7c008b250040e9de98cf9 · Note
• https://git.kernel.org/stable/c/d605d00085adc3fddf67de01dc2a44aebf1a3fb5 · Note
• https://git.kernel.org/stable/c/afed3cdc1cca133f804fcf57ff228974f424b23a · Note
• https://git.kernel.org/stable/c/e5ffc638faf5dc7d9dc85c9a95e10bf97442e0c0 · Note