CVE-2026-64370
Received Received - Intake

BaseFortify

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_timer_create() takes a pid reference via get_pid() and stores it in timer.it.cpu.pid. If the subsequent posix_cpu_timer_set() call fails, the function returns immediately without calling posix_cpu_timer_del() to release the pid reference, causing a leak. Fix it by calling posix_cpu_timer_del() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64370
EUVD
EUVD-2026-48914

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel posix_cpu_timers *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a reference count leak in the Linux kernel's posix-cpu-timers subsystem. The issue occurs in the do_cpu_nanosleep() function where a PID reference is acquired but not properly released if an error happens later in the process. This leads to a resource leak where the system fails to decrement the reference count for a process ID, potentially causing the PID to remain in use even after the process has terminated.

Detection Guidance

This vulnerability is specific to the Linux kernel's posix-cpu-timers subsystem and does not have a direct network detection method. Detection requires checking the kernel version and examining the affected function in the source code. Use uname -a to check the kernel version and grep for posix_cpu_timer_del() in the kernel source to verify the fix.

Impact Analysis

The impact is primarily on system stability and resource management. A PID reference leak could cause the kernel to run out of available process IDs over time, leading to failures in creating new processes. This might result in system hangs, crashes, or degraded performance, especially in environments with high process creation rates.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to ensure the fix is included. If an update is not immediately available, monitor your distribution's security advisories for a patch. Restart the system after applying the update to activate the fixed kernel.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64370. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart