In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path There is a use-after-free error… (CVE-2026-64424)
Source GCVE Database
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 2% of CVEs
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWhat to do
AI-suggested
A fix is available that replaces cancel_delayed_work() with disable_delayed_work_sync() to fully stop the TX worker before freeing memory. Users should apply the official Linux kernel patch that addresses this issue. Since this is a kernel vulnerability, updating to a patched kernel version is the recommended remediation. No additional mitigations are specified or required beyond applying the fix.
Description
A use-after-free vulnerability in the Linux kernel's netpoll subsystem has been resolved. The flaw occurs on the shutdown path where a pending TX worker may access freed memory due to improper synchronization. This can lead to memory corruption and potentially impact confidentiality, integrity, and availability. The issue is detected by KASAN and involves the improper cancellation of delayed work in a softirq context. The fix ensures the worker is fully stopped before freeing memory, preventing further access.
Weaknesses
References
- nvd.nist.gov/vuln/detail/CVE-2026-64424 (opens in a new tab)
- git.kernel.org/stable/c/45f1458a85017a023f138b22ac5c76abd477db42 (opens in a new tab)
- git.kernel.org/stable/c/5ed09a108d93a3b002cc79823d9455b50c4a8be7 (opens in a new tab)
- git.kernel.org/stable/c/95ecc5b58042f6b6743b589e6588f1cd7ba336aa (opens in a new tab)
- git.kernel.org/stable/c/a33f37f8d079da7236ed7b7e2aed2a34ab81e7cf (opens in a new tab)