The Linux kernel's xhci driver contained a memory leak in the xhci_ring_to_sgtable() function. This function allocates a temporary pages array to construct an sg_table via sg_alloc_table_from_pages(). While error paths correctly free this temporary array, the success path did not, causing a leak each time a sideband client obtains an endpoint or event ring buffer. The patch frees the temporary pages array after successful sg_table construction, as the sg_table maintains its own scatterlist entries independent of the temporary array.

The vulnerability causes a memory leak in kernel space when sideband clients interact with the xhci driver. While this does not directly indicate code execution or privilege escalation, memory leaks can degrade system stability or lead to resource exhaustion over time if exploited repeatedly.

A fix has been implemented to free the temporary pages array after successful sg_table construction in xhci_ring_to_sgtable(). Users should apply the official Linux kernel patch that addresses CVE-2026-64464 to remediate this issue. Patch status is not explicitly confirmed in the provided data; therefore, verify with the Linux kernel vendor advisory for the current remediation status and apply updates accordingly.