Skip to main content

Linux EUVDEUVD-2026-48807

| CVE-2026-64463 HIGH
Memory Leak (CWE-401)
2026-07-25 Linux GHSA-fcgc-c7jf-cmfv
Information Disclosure Linux
7.8
CVSS 3.1 · Vendor: Linux
View

Vulnerability Assessment

Weakness
CWE
CWE-401
ASVS 5.0
V15 - Secure Coding and Architecture Resource cleanup, leak prevention
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jul 27, 2026

Elevation of privilege in the Linux kernel's tcpci_rt1711h USB Type-C port controller driver allows a local attacker with low privileges to potentially achieve full system compromise. The driver fails to unregister the TCPCI port when an interrupt request or alert enable step fails during device probe, leaving a stale resource that can be exploited for code execution. No active exploitation or public exploit code is known; EPSS probability is low (0.21%).

Affected VersionsENISA

Linux 5.4.50 <5.5
Linux patch: 0
Linux 302c570bf36e997d55ad0d60628a2feec76954a4 <94b1abf1af94aa5a355e9f03675e07bccfc41c4b
Linux 895ec8c86e13f85b119c71d5f95491b48867955e
Linux 302c570bf36e997d55ad0d60628a2feec76954a4 <ce2e36e8759dfbfe546723810c306f42f484866d
Linux patch: 6.12.96
Linux 4309ab96ab744703871e35d829177dd9347bf643
Linux patch: 6.18.39
Linux 302c570bf36e997d55ad0d60628a2feec76954a4 <569f18a83eed0b0be4615f0c7bed40fb5c50e2e6
Linux 4.19.131 <4.20
Linux patch: 7.2-rc3
Linux 5.8
Linux 745dcedb896a740825160228f98dbb5725a49f85
Linux 5.7.7 <5.8
Linux patch: 6.6.145
Linux patch: 7.1.4
Linux 302c570bf36e997d55ad0d60628a2feec76954a4 <e8da46d99d3710106e7c44db14566bf9b57386b5
Linux 302c570bf36e997d55ad0d60628a2feec76954a4 <e5406c8fb71cd2f89a46300a746f6e7972e621e8

Affected Packages

euvd linux fix: 4.20, 5.5, 5.8

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (Linux) PRIMARY 7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SUSE 5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Red Hat 5.5 MEDIUM

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
CVSS changed
Jul 27, 2026 - 05:22 NVD
7.8 (HIGH)
Patch available
Jul 25, 2026 - 11:18 EUVD
CVE Published
Jul 25, 2026 - 08:51 cve.org
HIGH 7.8
CVE Published
Jul 25, 2026 - 08:51 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

rt1711h_probe() registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns without unregistering the TCPCI port. The explicit unregister currently only happens from the remove callback.

Register a devres action immediately after tcpci_register_port() succeeds, so tcpci_unregister_port() runs on later probe failures and on driver detach. Drop the remove callback to avoid unregistering the same port twice.

This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Threat Intelligence Overview

EPSS Score
0.2%
Top 89% exploitable
Data Quality
6 sources
Confidence: High
EUVD NVD CVE.org EPSS MSRC Vendor VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.2%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Defer
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact· derived
Medium

Priority Score

39
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +39
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Same weakness CWE-401 – Memory Leak

View all
CVE-2020-13934 HIGH
7.5
CVE-2016-4232 HIGH POC
7.5
CVE-2025-25469 HIGH POC
8.8
CVE-2024-25450 HIGH POC
8.8
CVE-2023-33718 HIGH POC
8.8
CVE-2019-6128 HIGH POC
8.8
CVE-2026-67183 HIGH POC
8.7
CVE-2023-34451 HIGH POC
8.2

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Affected

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-64463 ADVISORY https://ubuntu.com/security/notices/USN-8726-1 ADVISORY https://ubuntu.com/security/notices/USN-8727-1 ADVISORY https://vuldb.com/vuln/383267 REF https://git.kernel.org/stable/c/388f5354158fc038214b73baad43a723385fea1e REF https://git.kernel.org/stable/c/569f18a83eed0b0be4615f0c7bed40fb5c50e2e6 REF https://git.kernel.org/stable/c/94b1abf1af94aa5a355e9f03675e07bccfc41c4b REF https://git.kernel.org/stable/c/ce2e36e8759dfbfe546723810c306f42f484866d REF https://git.kernel.org/stable/c/e5406c8fb71cd2f89a46300a746f6e7972e621e8 REF https://git.kernel.org/stable/c/e8da46d99d3710106e7c44db14566bf9b57386b5

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy