CVE-2026-64080
Gravedad CVSS v3.1:
CRÍTICA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
30/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
firmware: arm_ffa: Snapshot notifier callbacks under lock<br />
<br />
Both notification handlers currently look up a notifier callback under<br />
notify_lock, drop the lock, and then dereference the returned<br />
notifier entry. A concurrent unregister can delete and free that<br />
entry in the gap, leaving the handler to dereference stale memory.<br />
<br />
Copy the callback pointer and callback data while notify_lock is<br />
still held and invoke the callback only after the lock is dropped.<br />
This keeps the existing callback execution model while removing the<br />
use-after-free window in both the framework and non-framework<br />
notification paths.
Impacto
Puntuación base 3.x
9.30
Gravedad 3.x
CRÍTICA