CVE-2026-64013: ACPI: button: Fix ACPI GPE handler leak during removal
In the Linux kernel, the following vulnerability has been resolved:
ACPI: button: Fix ACPI GPE handler leak during removal
Commit a7e23ec17fee ("ACPI: button: Install notifier for system events as well") changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update acpibuttonremove() to reflect that change. This leads to leaking the notify handler past driver removal, which may cause a kernel crash to occur if ACPI notify on the given device is triggered after removing the driver, and causes a subsequent probe of the given device with the same driver to fail.
Address this by updating the acpiremovenotifyhandler() call in acpibuttonremove() as appropriate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64013?
CVE-2026-64013 has a risk score of 34, indicating a moderate severity level.
How do I fix CVE-2026-64013?
To fix CVE-2026-64013, you should update your Linux kernel to the latest version that contains the patch.
What impact does CVE-2026-64013 have on system security?
CVE-2026-64013 could potentially lead to a vulnerability regarding the handling of ACPI GPE notifications, impacting system event management.
When was CVE-2026-64013 published?
CVE-2026-64013 was published on July 19, 2026.
Which software is affected by CVE-2026-64013?
CVE-2026-64013 affects the Linux kernel.