CVE-2026-64473

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> vfio: Remove device debugfs before releasing devres<br /> <br /> VFIO device debugfs files created with debugfs_create_devm_seqfile()<br /> store a devres allocated debugfs_devm_entry as inode private data.<br /> vfio_unregister_group_dev() currently calls vfio_device_del() before<br /> vfio_device_debugfs_exit(), but device_del() releases devres. This can<br /> leave debugfs entries visible with stale inode private data while<br /> unregister waits for userspace references to drain.<br /> <br /> Remove the per-device debugfs tree before vfio_device_del(). The debugfs<br /> view is diagnostic only, so losing it at the start of unregister is<br /> preferable to preserving entries whose backing storage may already have<br /> been released.<br /> <br /> Complete the teardown by clearing the per-device debugfs root after<br /> removal. This matches the global debugfs root cleanup and prevents<br /> future users from mistaking a removed dentry for a live debugfs tree<br /> during the remainder of unregister.