cveboard RSS feed

CVE-2026-64473

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

vfio: Remove device debugfs before releasing devres

In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfs_create_devm_seqfile() store a devres allocated debugfs_devm_entry as inode private data. vfio_unregister_group_dev() currently calls vfio_device_del() before vfio_device_debugfs_exit(), but device_del() releases devres. This can leave debugfs entries visible with stale inode private data while unregister waits for userspace references to drain. Remove the per-device debugfs tree before vfio_device_del(). The debugfs view is diagnostic only, so losing it at the start of unregister is preferable to preserving entries whose backing storage may already have been released. Complete the teardown by clearing the per-device debugfs root after removal. This matches the global debugfs root cleanup and prevents future users from mistaking a removed dentry for a live debugfs tree during the remainder of unregister.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2202844e4468c7539dba0c0b06577c93735af952affectedgit6cc60b41d61657dc469893d14e8e55d160056ff1UnavailableNone listed
2202844e4468c7539dba0c0b06577c93735af952affectedgita53109ffb6b5148e11a27fb7670355b92db12dd3UnavailableNone listed
2202844e4468c7539dba0c0b06577c93735af952affectedgita5df401dc84f091e20b045560569f0736758fea7UnavailableNone listed
2202844e4468c7539dba0c0b06577c93735af952affectedgitdc7fe87de492ea7f33a72b78d26650b75bf37f4fUnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.8affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver6.8UnavailableNone listed
6.12.96unaffectedsemverUnavailable6.12.*None listed
6.18.39unaffectedsemverUnavailable6.18.*None listed
7.1.4unaffectedsemverUnavailable7.1.*None listed
7.2unaffectedoriginal_commit_for_fixUnavailable*None listed