Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64377

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fix possible double free qcom_cpufreq.data is allocated with devm_kzalloc() in probe() as an array of per-domain data. qcom_cpufreq_hw_cpu_init() stores a pointer to one element of this array in policy->driver_data. qcom_cpufreq_hw_cpu_exit() currently calls kfree() on policy->driver_data. This is not valid because the memory is devm-managed. For the first domain, this can free the devm-managed alloc
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3cca5694799b20eb4167239feeffcdd697a64416285310951a0ced27b05bcb1b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/cpufreq/qcom-cpufreq-hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"l…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/cpufreq/qcom-cpufreq-hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"28a03a3f6e6cda0b0da3b43761d175dec5d14d13","status":"affected","version":"054a3ef683a176a509cc9b37f762029aae942495","versionType":"git"},{"lessThan":"e904961332801c87355f5d11c65bb433e717c489","status":"affected","version":"054a3ef683a176a509cc9b37f762029aae942495","versionType":"git"},{"lessThan":"9de568ef6cdfc7912d5ea8db02843c0e4ef0c75d","status":"affected","version":"054a3ef683a1…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/cpufreq/qcom-cpufreq-hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"l…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/cpufreq/qcom-cpufreq-hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"28a03a3f6e6cda0b0da3b43761d175dec5d14d13","status":"affected","version":"054a3ef683a176a509cc9b37f762029aae942495","versionType":"git"},{"lessThan":"e904961332801c87355f5d11c65bb433e717c489","status":"affected","version":"054a3ef683a176a509cc9b37f762029aae942495","versionType":"git"},{"lessThan":"9de568ef6cdfc7912d5ea8db02843c0e4ef0c75d","status":"affected","version":"054a3ef683a1…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/28a03a3f6e6cda0b0da3b43761d175dec5d14d13"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/9de568ef6cdfc7912d5ea8db02843c0e4ef0c75d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/bcb8889c4981fdde42d4fd2c29a77d510fe21da2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/e904961332801c87355f5d11c65bb433e717c489"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b33b1b5d113d97fc373c290d414d4e7472b1ace16e8cc0177f8cd3e674dacdb1 · sha256:ca547781b13793f9… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer