In the Linux kernel, the following vulnerability has been resolved:
xhci: sideband: fix ring sg table pages leak
xhci_ring_to_sgtable() allocates a temporary pages array and
uses it to build the returned sg_table with
sg_alloc_table_from_pages().
The error paths free the pages array, but the success path
returns the sg_table without freeing it. This leaks the temporary
array every time a sideband client gets an endpoint or event ring
buffer.
Free the pages array after sg_alloc_table_from_pages() succeeds.
The returned sg_table has its own scatterlist entries and does not
depend on the temporary array after construction.
References
Configurations
Configuration 1 (hide)
|
History
12 Nov 2026, 17:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.2:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.2:rc2:*:*:*:*:*:* |
|
| CWE | CWE-401 | |
| References | () https://git.kernel.org/stable/c/49f6e3c3ef19f04f6657ed8dce550e36c763abb8 - Patch | |
| References | () https://git.kernel.org/stable/c/99d00a9e35e311a91d258029d5bb584377296c34 - Patch | |
| References | () https://git.kernel.org/stable/c/a3eaf82ff842d6ca95937ea584417e04828235a6 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Linux linux Kernel
Linux |
Information
Published : 2026-07-25 10:17
Updated : 2026-11-12 17:51
NVD link : CVE-2026-64464
Mitre link : CVE-2026-64464
CVE.ORG link : CVE-2026-64464
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-401
Missing Release of Memory after Effective Lifetime