CVE-2026-64464
Received Received - Intake

Memory Leak in Linux Kernel XHCI Sideband

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and uses it to build the returned sg_table with sg_alloc_table_from_pages(). The error paths free the pages array, but the success path returns the sg_table without freeing it. This leaks the temporary array every time a sideband client gets an endpoint or event ring buffer. Free the pages array after sg_alloc_table_from_pages() succeeds. The returned sg_table has its own scatterlist entries and does not depend on the temporary array after construction.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-08-14
AI Q&A
2026-07-25
EPSS Evaluated
2026-08-13
NVD
CVE-2026-64464
EUVD
EUVD-2026-48808

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory leak vulnerability in the Linux kernel's xHCI (USB 3.0 host controller) driver. When handling sideband operations for endpoint or event ring buffers, a temporary array of pages is allocated but not properly freed after use. This causes the array to leak every time the function is called, potentially consuming system memory over time.

Detection Guidance

This vulnerability is specific to the Linux kernel's xhci sideband functionality and does not have network exposure. Detection requires checking kernel logs for memory leaks related to xhci ring sg table pages. Use commands like dmesg | grep xhci or journalctl -k | grep xhci to inspect kernel logs for related errors.

Impact Analysis

The primary impact is gradual memory exhaustion on systems using USB 3.0 devices. Over time, the leaked memory from repeated operations could lead to performance degradation or system instability. However, the vulnerability requires specific xHCI operations to trigger and does not directly enable data breaches or privilege escalation.

Compliance Impact

This vulnerability causes a memory leak in the Linux kernel's xhci driver, which could lead to resource exhaustion or instability in systems handling sensitive data. While not directly impacting GDPR or HIPAA compliance, such vulnerabilities may affect system reliability and availability, potentially leading to data processing disruptions that could violate these regulations if not properly mitigated.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-64464. Check your distribution's security advisories or kernel update channels for the latest stable release. Reboot the system after applying the update to ensure the patched kernel is active.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64464. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart