CVE-2026-64370

Awaiting Analysis Awaiting Analysis - Queue

posix-cpu-timers pid refcount leak in Linux kernel

Publication date: 2026-07-25

Last updated on: 2026-09-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_timer_create() takes a pid reference via get_pid() and stores it in timer.it.cpu.pid. If the subsequent posix_cpu_timer_set() call fails, the function returns immediately without calling posix_cpu_timer_del() to release the pid reference, causing a leak. Fix it by calling posix_cpu_timer_del() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-25

Last Modified

2026-09-08

Generated

2026-09-23

AI Q&A

2026-07-25

EPSS Evaluated

2026-09-22

NVD

CVE-2026-64370

EUVD

EUVD-2026-48914

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	2.6.12
linux	linux_kernel	2.6.12
linux	linux_kernel	2.6.12
linux	linux_kernel	2.6.12
linux	linux_kernel	2.6.12
linux	linux_kernel	From 5.11 (inc) to 5.15.212 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.178 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.145 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.96 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.39 (exc)
linux	linux_kernel	From 2.6.12.1 (inc) to 5.10.261 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.1.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a reference count leak in the Linux kernel's posix-cpu-timers subsystem. The issue occurs in the do_cpu_nanosleep() function where a PID reference is acquired but not properly released if an error happens later in the process. This leads to a resource leak where the system fails to decrement the reference count for a process ID, potentially causing the PID to remain in use even after the process has terminated.

Detection Guidance

This vulnerability is specific to the Linux kernel's posix-cpu-timers subsystem and does not have a direct network detection method. Detection requires checking the kernel version and examining the affected function in the source code. Use uname -a to check the kernel version and grep for posix_cpu_timer_del() in the kernel source to verify the fix.

Impact Analysis

The impact is primarily on system stability and resource management. A PID reference leak could cause the kernel to run out of available process IDs over time, leading to failures in creating new processes. This might result in system hangs, crashes, or degraded performance, especially in environments with high process creation rates.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel memory leak issue in the Linux posix-cpu-timers subsystem, which does not involve data exposure or processing of regulated information.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to ensure the fix is included. If an update is not immediately available, monitor your distribution's security advisories for a patch. Restart the system after applying the update to activate the fixed kernel.

Hi! I’m here to help you understand CVE-2026-64370. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70