pds_core: fix debugfs_lookup dentry leak and error handling
Summary
| CVE | CVE-2026-64147 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-07-19 16:17:56 UTC |
| Updated | 2026-08-17 19:37:15 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a dentry with an elevated reference count that must be released with dput(). The current code discards the returned dentry without calling dput(), causing a reference leak on every firmware reset recovery. Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup() returns ERR_PTR(-ENODEV), not NULL. The current check passes for error pointers and would call dput() on an invalid pointer, causing a crash. |
Risk And Classification
Primary CVSS: v3.1 5.5 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.001750000 probability, percentile 0.072710000 (date 2026-08-02)
Problem Types: CWE-401
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 2bbf2b1c20f934a054172175ccbabcc01fe69ef6 60ef1675b652e912f3eb064767af4432393291fd git | Not specified |
| CNA | Linux | Linux | affected bc90fbe0c3182157d2be100a2f6c2edbb1820677 26e19622c485e53c3fdb299e822068a0542ddf0c git | Not specified |
| CNA | Linux | Linux | affected bc90fbe0c3182157d2be100a2f6c2edbb1820677 91d13e92b983e6c6d7631012c2e20ae8057de9f2 git | Not specified |
| CNA | Linux | Linux | affected bc90fbe0c3182157d2be100a2f6c2edbb1820677 d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32 git | Not specified |
| CNA | Linux | Linux | affected bc90fbe0c3182157d2be100a2f6c2edbb1820677 dc416e32baaeb620b9809e9e25fc7b30889686e9 git | Not specified |
| CNA | Linux | Linux | affected 3ffe14c36985e3174933127c9efad82ac8f3fefb git | Not specified |
| CNA | Linux | Linux | affected 6.6.16 6.6.142 semver | Not specified |
| CNA | Linux | Linux | affected 6.7.4 6.8 semver | Not specified |
| CNA | Linux | Linux | affected 6.8 | Not specified |
| CNA | Linux | Linux | unaffected 6.8 semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.142 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.92 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.18.34 6.18.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.0.11 7.0.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.1 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/60ef1675b652e912f3eb064767af4432393291fd | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/dc416e32baaeb620b9809e9e25fc7b30889686e9 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/91d13e92b983e6c6d7631012c2e20ae8057de9f2 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/26e19622c485e53c3fdb299e822068a0542ddf0c | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.