5.5

CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

Modified
AliasesUBUNTU-CVE-2026-64370DEBIAN-CVE-2026-64370
Published 25-07-2026Last modified 15-10-2026

Vulnerability summary

CVE-2026-64370 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.5% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 22 · Related 22
OPENSUSE-SU-2026:11476-1SUSE-SU-2026:5091-1USN-8726-1USN-8726-2USN-8726-3USN-8726-4

Timeline

  1. 25-07-2026
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_timer_create() takes a pid reference via get_pid() and stores it in timer.it.cpu.pid. If the subsequent posix_cpu_timer_set() call fails, the function returns immediately without calling posix_cpu_timer_del() to release the pid reference, causing a leak. Fix it by calling posix_cpu_timer_del() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.13% on 06-10-2026

06-10-202605-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu169 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-147.147 | < 7.0.0-31.31
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1067.70 | < 7.0.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.180-1 | < 6.12.96-1 | < 7.1.4-1
  • linux-6.12< 6.12.100-1~deb12u1
Linux2 products
  • linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < afed3cdc1cca133f804fcf57ff228974f424b23a | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 8a270b1258797f61b61da44f8bfd41a581b5c85b | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d605d00085adc3fddf67de01dc2a44aebf1a3fb5 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e5ffc638faf5dc7d9dc85c9a95e10bf97442e0c0 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < eb4cec29a78334d09bcfb41c0660cdd62ba05843 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7776f9226e99eb49d97492b0b445027cfcb189da | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 8f06363446c5d043c9a7c008b250040e9de98cf9 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 87bd2ad568e15b90d5f7d4bcd70342d05dad649c | 2.6.12
  • linux_kernel≥ 2.6.12.1, < 5.10.261 | ≥ 5.11, < 5.15.212 | ≥ 5.16, < 6.1.178 | ≥ 6.2, < 6.6.145 | ≥ 6.7, < 6.12.96 | ≥ 6.13, < 6.18.39 | ≥ 6.19, < 7.1.4 | 2.6.12 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5

3 vendors · 173 products

References

35 links
Show all 35 references