Skip to main content

Linux Kernel CVE-2026-64332

| EUVDEUVD-2026-48876 MEDIUM
Memory Leak (CWE-401)
2026-07-25 Linux GHSA-7w4g-q985-4523
Denial Of Service Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local low-privilege access required to trigger ULPI registration failures; no confidentiality or integrity impact, only potential memory exhaustion leading to availability loss.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.5 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Metadata Corrected
Sep 03, 2026 - 16:40 vuln.today
tag: Information Disclosure replaced by Denial Of Service
Analysis Generated
Sep 03, 2026 - 16:16 vuln.today
CVSS changed
Sep 03, 2026 - 16:07 NVD
5.5 (MEDIUM)
Patch available
Jul 25, 2026 - 11:18 EUVD
CVE Published
Jul 25, 2026 - 08:49 cve.org
UNKNOWN (no severity yet)
CVE Published
Jul 25, 2026 - 08:49 nvd
MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

USB: ulpi: fix memory leak on registration failure

The allocated device name is never freed on early ULPI device registration failures.

Fix this by initialising the device structure earlier and releasing the initial reference whenever registration fails.

AnalysisAI

Memory leak in the Linux kernel USB ULPI (Universal Serial Bus Link Interface) subsystem allows a local low-privileged user to trigger repeated ULPI device registration failures that leak kernel memory, potentially leading to system instability or denial of service. Affected kernel versions span from 4.2 through multiple pre-patch stable branches, with fixes backported to 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.96, 6.18.39, 7.1.4, and 7.2-rc3. No public exploit or active exploitation has been identified at time of analysis; the EPSS score of 0.22% (13th percentile) reflects minimal probability of weaponization.

Technical ContextAI

The ULPI subsystem manages USB PHY/transceiver hardware through a standardized register interface in the Linux kernel. The defect resides in the ULPI device registration path where an allocated device name string is not freed when registration fails early - a textbook CWE-401 (Missing Release of Memory after Effective Lifetime) defect. The root cause is that the device structure was not initialized before the failure path, preventing the standard device_initialize()/put_device() reference-counting mechanism from performing cleanup. The affected CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* identifies the upstream Linux kernel, and commit history traces the bug introduction to 289fcff4bcdb1dcc0ce8788b7ea0f58a9e4a495f, corresponding to approximately kernel 4.2. The fix initializes the device structure earlier so normal reference release handles all failure-path cleanup.

RemediationAI

Apply the vendor-released stable kernel patches corresponding to the running kernel branch: 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.96, 6.18.39, or 7.1.4. Per-branch fix commits are available at git.kernel.org/stable (d5b32f36c508, 691e61e5d4cf, 88187a43135c, 5c098f20f15d, 624c57147df1, 1967a7f0cd5c, e5493c9a98ff, 8af6812795869a). Linux distribution vendors will typically backport this fix into their distribution kernels on their standard security update schedule - check Red Hat, Debian, Ubuntu, and SUSE advisories for distribution-specific versions. If immediate patching is not feasible, restrict physical USB access and disable USB hotplug where operationally possible; however, these controls are incomplete mitigations. There is no configuration setting to selectively disable the vulnerable ULPI registration path without disabling USB ULPI support entirely.

Same weakness CWE-401 – Memory Leak

View all
CVE-2020-13934 HIGH
7.5
CVE-2016-4232 HIGH POC
7.5
CVE-2024-25450 HIGH POC
8.8
CVE-2023-33718 HIGH POC
8.8
CVE-2019-6128 HIGH POC
8.8
CVE-2026-67183 HIGH POC
8.7
CVE-2023-34451 HIGH POC
8.2
CVE-2023-41484 HIGH POC
8.1

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.208 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.184 Affected
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.218 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.186 Affected
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.237 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.180 Affected
SUSE Linux Enterprise Real Time 15 SP7 SUSE Real Time Module 15 SP7 Fixed
SUSE Linux Micro 6.0 Fixed

Share

CVE-2026-64332 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy