CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
In the Linux kernel, the following vulnerability has been resolved:
posix-cpu-timers: Fix pid refcount leak in docpunanosleep() error path
In docpunanosleep(), posixcputimercreate() takes a pid reference via getpid() and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset() call fails, the function returns immediately without calling posixcputimerdel() to release the pid reference, causing a leak.
Fix it by calling posixcputimerdel() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64370?
The severity of CVE-2026-64370 is rated as medium with a score of 5.5.
How do I fix CVE-2026-64370?
To resolve CVE-2026-64370, upgrade to the patched version of the Linux kernel that addresses this vulnerability.
What components are affected by CVE-2026-64370?
CVE-2026-64370 affects the Linux kernel, specifically the implementation of posix_cpu_timers.
What type of vulnerability is CVE-2026-64370?
CVE-2026-64370 is categorized as a pid reference count leak in the Linux kernel.
What is the impact of CVE-2026-64370?
The impact of CVE-2026-64370 can lead to denial of service due to resource leaks in the affected system.