-

CVE-2026-64464

xhci: sideband: fix ring sg table pages leak

In the Linux kernel, the following vulnerability has been resolved:

xhci: sideband: fix ring sg table pages leak

xhci_ring_to_sgtable() allocates a temporary pages array and
uses it to build the returned sg_table with
sg_alloc_table_from_pages().

The error paths free the pages array, but the success path
returns the sg_table without freeing it. This leaks the temporary
array every time a sideband client gets an endpoint or event ring
buffer.

Free the pages array after sg_alloc_table_from_pages() succeeds.
The returned sg_table has its own scatterlist entries and does not
depend on the temporary array after construction.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version de66754e9f8029f8ae955a588959b99cab56b506
Version < 99d00a9e35e311a91d258029d5bb584377296c34
Status affected
Version de66754e9f8029f8ae955a588959b99cab56b506
Version < a3eaf82ff842d6ca95937ea584417e04828235a6
Status affected
Version de66754e9f8029f8ae955a588959b99cab56b506
Version < 49f6e3c3ef19f04f6657ed8dce550e36c763abb8
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.07
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/99d00a9e35e311a91d258029d5bb584377296c34
https://git.kernel.org/stable/c/a3eaf82ff842d6ca95937ea584417e04828235a6
https://git.kernel.org/stable/c/49f6e3c3ef19f04f6657ed8dce550e36c763abb8