What is the CVSS score of CVE-2026-64246?

CVE-2026-64246 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by CVE-2026-64246?

A use-after-free vulnerability in the Linux kernel affects Buffalo LinkStation NAS systems, enabling local privilege escalation that could compromise system confidentiality, integrity, and…. A patch is available.

How to fix or mitigate CVE-2026-64246?

Within 24 hours, identify any Buffalo LinkStation NAS devices in your infrastructure and verify kernel versions against affected releases. Within 7 days, apply the available vendor patch to all identified systems or restrict local user access on affected devices if patching cannot be completed immediately. Within 30 days, confirm patch deployment across all LinkStation systems, update your asset inventory records, and audit local account provisioning policies on these devices to limit privilege escalation attack surface.

Linux Kernel CVE-2026-64246

EUVD-2026-48655 HIGH

Use After Free (CWE-416)

2026-07-24 Linux

GHSA-m784-m9j8-378q

Information Disclosure Linux Use After Free Memory Corruption

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.0 HIGH

Local vector and low-privilege requirement confirmed by driver context; AC raised to H because reliable UAF exploitation for code execution requires precise heap manipulation timing at driver initialization.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 13, 2026 - 20:49 vuln.today

CVSS changed

Aug 13, 2026 - 18:37 NVD

7.8 (HIGH)

Patch available

Jul 24, 2026 - 17:48 EUVD

CVE Published

Jul 24, 2026 - 15:31 nvd

HIGH 7.8

CVE Published

Jul 24, 2026 - 15:31 cve.org

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

Move of_node_put(dn) after the of_match_node() call, which still needs the node pointer. The node reference is correctly released after use.

AnalysisAI

Use-after-free in the Linux kernel's linkstation-poweroff driver exposes systems running affected kernel versions on Buffalo LinkStation NAS hardware to local privilege escalation. The flaw resides in linkstation_poweroff_init(), where of_node_put(dn) was called before of_match_node() finished using the pointer, producing a kernel-space use-after-free that can corrupt slab-allocated memory. No public exploit has been identified and the EPSS score of 0.16% (6th percentile) indicates very low observed exploitation probability, though the official CVSS base severity is 7.8 (High) with confirmed high impact to confidentiality, integrity, and availability.

Technical ContextAI

The linkstation-poweroff driver (power/reset/linkstation-poweroff.c) handles power-off sequencing for Buffalo LinkStation NAS appliances using Open Firmware device-tree bindings. of_node_put() decrements the reference count of an of_node structure; calling it prematurely allows the kernel's slab allocator to reclaim or repurpose that memory region. A subsequent call to of_match_node() then reads the freed node pointer, constituting a classic CWE-416 (Use After Free) condition entirely within kernel space. The vulnerability was introduced at commit e2f471efe1d607a7aff38ce53ec717cebe4283d6 and is confined to kernels built with CONFIG_POWER_RESET_LINKSTATION enabled. Affected CPE: cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*.

RemediationAI

The primary fix is to upgrade to a patched stable kernel release: Linux 5.15.211, 6.1.177, 6.6.144, 6.12.95, 6.18.38, or 7.1.3, depending on the stable branch in use. Upstream commits are published at https://git.kernel.org/stable/c/93c7ee139721936b6fa717572e74d3994603ae13 and the six additional stable-branch commits referenced in the advisory. For systems that cannot be immediately patched, disabling the linkstation-poweroff driver by setting CONFIG_POWER_RESET_LINKSTATION=n and rebuilding the kernel, or blacklisting the module via /etc/modprobe.d if compiled as a loadable module, eliminates the attack surface entirely - the only trade-off is loss of hardware-controlled power-off functionality on Buffalo LinkStation devices, which may require manual or IPMI-based power management instead. NVD advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-64246.

Same weakness CWE-416 – Use After Free

View all

CVE-2019-0708 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2014-0322 HIGH POC

8.8

CVE-2012-4792 HIGH POC

8.8

CVE-2009-4324 HIGH POC

7.8

CVE-2015-0313 CRITICAL POC

9.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2013-2551 HIGH POC

8.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
openSUSE Tumbleweed	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected

CVE-2026-64246 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-64246

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-416 – Use After Free

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code