Skip to main content

Linux Kernel CVE-2026-64173

| EUVDEUVD-2026-45858 MEDIUM
2026-07-19 Linux GHSA-2pv6-rxgj-2695
Information Disclosure Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local access with low privileges needed to reach tracing subsystem; impact is kernel panic (availability only); no confidentiality or integrity effects.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
4.7 MEDIUM
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 13, 2026 - 16:15 vuln.today
CVSS changed
Aug 13, 2026 - 15:37 NVD
5.5 (MEDIUM)
Patch available
Jul 19, 2026 - 17:03 EUVD
CVE Published
Jul 19, 2026 - 15:40 cve.org
UNKNOWN (no severity yet)
CVE Published
Jul 19, 2026 - 15:40 nvd
MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

tracing: Do not call map->ops->elt_free() if elt_alloc() fails

In paths where tracing_map_elt_alloc() failed to allocate objects, the map->ops->elt_alloc() call was never successful. In this case, map->ops->elt_free() should not be called.

AnalysisAI

Invalid cleanup in the Linux kernel's tracing_map subsystem causes a kernel panic when memory allocation fails during element initialization. Specifically, the error path in tracing_map_elt_alloc() incorrectly invokes map->ops->elt_free() on uninitialized data when elt_alloc() was never successfully called, producing an invalid memory operation that crashes the kernel. This affects all kernel branches from 4.17 through the respective fixed stable releases. No public exploit exists and EPSS is 0.16% (6th percentile), but any local low-privileged user with access to the tracing subsystem who can induce allocation failures can trigger a denial of service.

Technical ContextAI

The vulnerability resides in the Linux kernel's tracing_map subsystem, which underpins the eBPF and ftrace tracing infrastructure. tracing_map_elt_alloc() is responsible for allocating and initializing tracing map elements, including calling the operator callback map->ops->elt_alloc(). When an allocation failure occurs before elt_alloc() is invoked, the cleanup path incorrectly calls map->ops->elt_free() on memory that was never properly initialized by its paired constructor - a mismatched allocator/deallocator pattern similar in class to CWE-762 (Mismatched Memory Management Routines), though no CWE is formally assigned for this CVE. The bug was introduced with commit 2734b629525a9dae5bf217cbf0a9651da93d2108 in Linux 4.17 and propagated across all subsequent stable branches. CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* confirms broad applicability across the Linux kernel product line.

RemediationAI

Upgrade to a patched Linux kernel version appropriate for your stable branch: 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, or 7.1. Individual stable-branch fix commits are available at https://git.kernel.org/stable/c/ - specific hashes include 49332e49ad5b20262cc719b03d4123b9362de701, b559a218eece132de0c58d444877b5627cbee524, b427e9f6d81c9341cba23ef92f860f99f830d91d, f383cff9fb382139980bac1bcd3f3f5d59f68435, 1a150947f8480262a46c860f1acb9c6597ca7097, 798183376d9d3e278a270ea0e75a5769c8f145d9, b6723339736320b2e1784258ad4490cec7aac11a, and 8f0f5c4fb9df0e19a341e0c6ed8dc4fda9124f03 for the respective branches. Ubuntu users should apply the update from USN-8575-1. As a compensating control where kernel patching is not immediately feasible, restrict unprivileged access to the kernel tracing subsystem by setting kernel.perf_event_paranoid=3 via sysctl, or by removing CAP_PERFMON and CAP_SYS_ADMIN from untrusted users - note this will disable legitimate performance monitoring and tracing for those users.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Affected

Share

CVE-2026-64173 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy