CVE-2026-64147 is a vulnerability in Linux Kernel
Published on July 19, 2026
pds_core: fix debugfs_lookup dentry leak and error handling
In the Linux kernel, the following vulnerability has been resolved:
pds_core: fix debugfs_lookup dentry leak and error handling
debugfs_lookup() returns a dentry with an elevated reference count that
must be released with dput(). The current code discards the returned
dentry without calling dput(), causing a reference leak on every
firmware reset recovery.
Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup()
returns ERR_PTR(-ENODEV), not NULL. The current check passes for error
pointers and would call dput() on an invalid pointer, causing a crash.
Products Associated with CVE-2026-64147
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 2bbf2b1c20f934a054172175ccbabcc01fe69ef6 and below 60ef1675b652e912f3eb064767af4432393291fd is affected.
- Version bc90fbe0c3182157d2be100a2f6c2edbb1820677 and below 26e19622c485e53c3fdb299e822068a0542ddf0c is affected.
- Version bc90fbe0c3182157d2be100a2f6c2edbb1820677 and below 91d13e92b983e6c6d7631012c2e20ae8057de9f2 is affected.
- Version bc90fbe0c3182157d2be100a2f6c2edbb1820677 and below d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32 is affected.
- Version bc90fbe0c3182157d2be100a2f6c2edbb1820677 and below dc416e32baaeb620b9809e9e25fc7b30889686e9 is affected.
- Version 3ffe14c36985e3174933127c9efad82ac8f3fefb is affected.
- Version 6.6.16 and below 6.6.142 is affected.
- Version 6.7.4 and below 6.8 is affected.
- Version 6.8 is affected.
- Before 6.8 is unaffected.
- Version 6.6.142, <= 6.6.* is unaffected.
- Version 6.12.92, <= 6.12.* is unaffected.
- Version 6.18.34, <= 6.18.* is unaffected.
- Version 7.0.11, <= 7.0.* is unaffected.
- Version 7.1, <= * is unaffected.