CVE Explorer

CVE-2026-64370

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_timer_create() takes a pid reference via get_pid() and stores it in timer.it.cpu.pid. If the subsequent posix_cpu_timer_set() call fails, the function returns immediately without calling posix_cpu_timer_del() to release the pid reference, causing a leak. Fix it by calling posix_cpu_timer_del() before the unlock-and-return

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4458d4d3d4fde4bccd085657bf80b83314fb1b1b2e4856e4a27e0820e5f27d63

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/time/posix-cpu-timers.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semve…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/time/posix-cpu-timers.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"afed3cdc1cca133f804fcf57ff228974f424b23a","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"8a270b1258797f61b61da44f8bfd41a581b5c85b","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"d605d00085adc3fddf67de01dc2a44aebf1a3fb5","status":"affected","version":"1da177e4c3f4152…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/7776f9226e99eb49d97492b0b445027cfcb189da"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/87bd2ad568e15b90d5f7d4bcd70342d05dad649c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/8a270b1258797f61b61da44f8bfd41a581b5c85b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/8f06363446c5d043c9a7c008b250040e9de98cf9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/afed3cdc1cca133f804fcf57ff228974f424b23a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/d605d00085adc3fddf67de01dc2a44aebf1a3fb5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/e5ffc638faf5dc7d9dc85c9a95e10bf97442e0c0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/eb4cec29a78334d09bcfb41c0660cdd62ba05843"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:1aee015d6dbb5a505fc0a341eaa2e6fe9e698cc762bd45adcdbb32b4c720484f · sha256:44aca239198d82ab… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer