5.5

CVE-2026-64092: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-64092DEBIAN-CVE-2026-64092
Published 19-07-2026Last modified 19-07-2026
Open JSON

Vulnerability summary

CVE-2026-64092 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 12
USN-8729-1USN-8729-2USN-8729-3USN-8729-4USN-8729-5USN-8729-6

Timeline

  1. 19-07-2026
    PublishedVulnerability first disclosed.

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown The receiver shutdown timer handler, batadv_tp_receiver_shutdown(), is responsible for releasing the tp_vars reference it holds. However, the existing logic for coordinating this release with batadv_tp_stop_all() was flawed. timer_shutdown_sync() guarantees the timer will not fire again after it returns, but it returns non-zero only when the timer was pending at the time of the call. If the timer had already expired (and batadv_tp_stop_all() would unsucessfully try to rearm itself), batadv_tp_stop_all() skips its batadv_tp_vars_put(), and batadv_tp_receiver_shutdown() fails to put its own reference as well. Fix this by introducing a new atomic variable receiving that is set to 1 when the receiver is initialized and cleared atomically with atomic_xchg() by whichever side claims it first. Only the side that observes the transition from 1 to 0 is responsible for releasing the tp_vars timer reference, eliminating the uncertainty.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu123 products
  • linux< 6.8.0-139.139
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1064.67
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 268078acae72daa12b17b2b299701cb9924e469a, < 7715c73f33260af724d734c41b794457e9be8dbc | ≥ 58943b7ea356294749dae3e75b96c0ee292c00be, < 297e1bc4a915b7cd3e65a79ed906b23fb3d7aaae | ≥ 79bc0eaeef2c5797317bf2da8e3159a74d62ec47, < 0b1bedf114ea93fef929b31f0d70a9eedcc601de | ≥ 26dfeee8db81354bfdade155f27f9e16510ad196, < a9f0bfd624ee8a286d6fd2bf0f796e730efb49b0 | ≥ 03660dab86f93319178a24667f6998526dc4355d, < b285bc0a97f43823a4967fb6d286de4c7f53d541 | ≥ 8634c1dbd73adb74d40533ebb7e914efb82e71fb, < d078501dde9b57210f1808cdef4b59463d1f5fc8 | ≥ 3d3cf6a7314aca4df0a6dde28ce784a2a30d0166, < 77098e4bea37af51d3962efa88a5af2ea5e1ac57 | 5e7d0ac936354c36810e74ac3056b334ed1f4058 | ≥ 5.10.259, < 5.11 | ≥ 6.6.140, < 6.6.142 | ≥ 6.12.90, < 6.12.92 | ≥ 6.18.32, < 6.18.34 | ≥ 7.0.9, < 7.0.11
  • linux_kernel≥ 5.10.259, < 5.11 | ≥ 6.6.140, < 6.6.142 | ≥ 6.12.90, < 6.12.92 | ≥ 6.18.32, < 6.18.34 | ≥ 7.0.9, < 7.0.11 | 7.1:rc4
Debian1 product
  • linux< 6.12.94-1 | < 7.0.12-1

3 vendors · 126 products

References

23 links
Show all 23 references