CVE-2026-64147

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
30/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> pds_core: fix debugfs_lookup dentry leak and error handling<br /> <br /> debugfs_lookup() returns a dentry with an elevated reference count that<br /> must be released with dput(). The current code discards the returned<br /> dentry without calling dput(), causing a reference leak on every<br /> firmware reset recovery.<br /> <br /> Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup()<br /> returns ERR_PTR(-ENODEV), not NULL. The current check passes for error<br /> pointers and would call dput() on an invalid pointer, causing a crash.

Impact