PT-2026-64685 · Linux · Linux
CVE-2026-64464
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
xhci: sideband: fix ring sg table pages leak
xhci ring to sgtable() allocates a temporary pages array and
uses it to build the returned sg table with
sg alloc table from pages().
The error paths free the pages array, but the success path
returns the sg table without freeing it. This leaks the temporary
array every time a sideband client gets an endpoint or event ring
buffer.
Free the pages array after sg alloc table from pages() succeeds.
The returned sg table has its own scatterlist entries and does not
depend on the temporary array after construction.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux