CVE-2026-64147 Linux CVE debrief

Who should care

Linux kernel users and administrators should be aware of this vulnerability and its potential impact on their systems. They should review the official CVE record and NVD entry for more information and verify the affected scope and severity. Additionally, they should ensure that their systems are updated with the latest Linux kernel version and monitor for any potential issues or error messages related to pds_core and debugfs.

Technical summary

The Linux kernel vulnerability CVE-2026-64147 was found in pds_core. The debugfs_lookup() function returns a dentry with an elevated reference count that must be released with dput(). The current code discards the returned dentry without calling dput(), causing a reference leak on every firmware reset recovery. Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup() returns ERR_PTR(-ENODEV), not NULL. The current check passes for error pointers and would call dput() on an invalid pointer, causing a crash. Defenders should review the official CVE record and NVD entry for more information and ensure that their systems are updated with the latest Linux kernel version.

Defensive priority

Medium

Recommended defensive actions

• Apply the official patch or update to the latest Linux kernel version.
• Review and verify the pds_core implementation for proper debugfs_lookup handling.
• Monitor for any potential issues or error messages related to pds_core and debugfs.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record was published on 2026-07-19T16:17:56.643Z and has not been modified since then. The NVD entry is currently Received. There is limited information available about the vulnerability, and defenders should verify the affected scope and severity with the official CVE record. The vulnerability affects the Linux kernel, specifically in the pds_core component, and is related to a debugfs_lookup dentry leak and error handling issue.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.