CVE-2026-64179: linux
CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-64179DEBIAN-CVE-2026-64179
Published 19-07-2026Last modified 19-07-2026
Vulnerability summary
CVE-2026-64179 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.11% chance of exploitation in the next 30 days, higher than 1.4% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.11%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 43 · Related 43OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23241-1SUSE-SU-2026:23244-1SUSE-SU-2026:23881-1SUSE-SU-2026:23887-1SUSE-SU-2026:23897-1SUSE-SU-2026:23902-1SUSE-SU-2026:3790-1SUSE-SU-2026:3810-1USN-8575-1USN-8575-2USN-8575-3USN-8576-1USN-8576-2USN-8593-1USN-8603-1USN-8610-1USN-8618-1USN-8620-1USN-8620-2USN-8620-3USN-8620-4USN-8663-1USN-8664-1USN-8668-1USN-8668-2USN-8728-1USN-8728-2USN-8728-3USN-8729-1USN-8729-2USN-8729-3USN-8729-4USN-8729-5USN-8729-6USN-8761-1USN-8761-2USN-8761-3USN-8781-1USN-8802-1USN-8906-1
Timeline
- 19-07-2026PublishedVulnerability first disclosed.
Description
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ipc_protocol_init() is not freed on the error paths that follow in ipc_imem_init(). Fix that by calling the corresponding release function ipc_protocol_deinit() in the error path.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.11%
Chance of exploitation in the next 30 days
Percentile
1%
Versus all other CVEs
30-day change
0.00 pp
From 0.11% on 19-09-2026
19-09-202619-10-2026
EPSS score0.11%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu155 products
- linux< 5.15.0-186.196 | < 6.8.0-139.139 | < 7.0.0-28.28
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1112.119 | < 6.8.0-1064.67 | < 7.0.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 3670970dd8c661c10c10c300d726f59428eaad32, < f1a4d57847813fae42fbb7eb35f2dd48b9cff8a9 | ≥ 3670970dd8c661c10c10c300d726f59428eaad32, < ba6d8643019c33428f7c0658863e80e0b04a70f4 | ≥ 3670970dd8c661c10c10c300d726f59428eaad32, < 6f63a60580ebdd9a1f22f89a84814d1fefe16b1c | ≥ 3670970dd8c661c10c10c300d726f59428eaad32, < 583fd5a8fc797c8ecf2e1a7b923740c5e5734e85 | ≥ 3670970dd8c661c10c10c300d726f59428eaad32, < ffb6dbb49c96be82f07c7b112e3ebc3e6fdd8dd5 | ≥ 3670970dd8c661c10c10c300d726f59428eaad32, < 8f764a7810a9f114313c439d25b11f4417c6e0dd | ≥ 3670970dd8c661c10c10c300d726f59428eaad32, < c5d93b2c40355e999715262a824965aac025a427 | 5.14
- linux_kernel≥ 5.14, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.142 | ≥ 6.7, < 6.12.92 | ≥ 6.13, < 6.18.34 | ≥ 6.19, < 7.0.11 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4
Debian1 product
- linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.12-1
3 vendors · 158 products