Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-64147

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-19 Jul, 2026 | 15:40
Updated At-19 Jul, 2026 | 15:40
Rejected At-
Credits

pds_core: fix debugfs_lookup dentry leak and error handling

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a dentry with an elevated reference count that must be released with dput(). The current code discards the returned dentry without calling dput(), causing a reference leak on every firmware reset recovery. Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup() returns ERR_PTR(-ENODEV), not NULL. The current check passes for error pointers and would call dput() on an invalid pointer, causing a crash.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:19 Jul, 2026 | 15:40
Updated At:19 Jul, 2026 | 15:40
Rejected At:
▼CVE Numbering Authority (CNA)
pds_core: fix debugfs_lookup dentry leak and error handling

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a dentry with an elevated reference count that must be released with dput(). The current code discards the returned dentry without calling dput(), causing a reference leak on every firmware reset recovery. Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup() returns ERR_PTR(-ENODEV), not NULL. The current check passes for error pointers and would call dput() on an invalid pointer, causing a crash.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/net/ethernet/amd/pds_core/debugfs.c
Default Status
unaffected
Versions
Affected
  • From 2bbf2b1c20f934a054172175ccbabcc01fe69ef6 before 60ef1675b652e912f3eb064767af4432393291fd (git)
  • From bc90fbe0c3182157d2be100a2f6c2edbb1820677 before 26e19622c485e53c3fdb299e822068a0542ddf0c (git)
  • From bc90fbe0c3182157d2be100a2f6c2edbb1820677 before 91d13e92b983e6c6d7631012c2e20ae8057de9f2 (git)
  • From bc90fbe0c3182157d2be100a2f6c2edbb1820677 before d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32 (git)
  • From bc90fbe0c3182157d2be100a2f6c2edbb1820677 before dc416e32baaeb620b9809e9e25fc7b30889686e9 (git)
  • 3ffe14c36985e3174933127c9efad82ac8f3fefb (git)
  • From 6.6.16 before 6.6.142 (semver)
  • From 6.7.4 before 6.8 (semver)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/net/ethernet/amd/pds_core/debugfs.c
Default Status
affected
Versions
Affected
  • 6.8
Unaffected
  • From 0 before 6.8 (semver)
  • From 6.6.142 through 6.6.* (semver)
  • From 6.12.92 through 6.12.* (semver)
  • From 6.18.34 through 6.18.* (semver)
  • From 7.0.11 through 7.0.* (semver)
  • From 7.1 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/60ef1675b652e912f3eb064767af4432393291fd
N/A
https://git.kernel.org/stable/c/26e19622c485e53c3fdb299e822068a0542ddf0c
N/A
https://git.kernel.org/stable/c/91d13e92b983e6c6d7631012c2e20ae8057de9f2
N/A
https://git.kernel.org/stable/c/d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32
N/A
https://git.kernel.org/stable/c/dc416e32baaeb620b9809e9e25fc7b30889686e9
N/A
Hyperlink: https://git.kernel.org/stable/c/60ef1675b652e912f3eb064767af4432393291fd
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/26e19622c485e53c3fdb299e822068a0542ddf0c
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/91d13e92b983e6c6d7631012c2e20ae8057de9f2
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/dc416e32baaeb620b9809e9e25fc7b30889686e9
Resource: N/A
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:19 Jul, 2026 | 16:17
Updated At:19 Jul, 2026 | 16:17

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_lookup() returns a dentry with an elevated reference count that must be released with dput(). The current code discards the returned dentry without calling dput(), causing a reference leak on every firmware reset recovery. Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup() returns ERR_PTR(-ENODEV), not NULL. The current check passes for error pointers and would call dput() on an invalid pointer, causing a crash.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
CPE Matches
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://git.kernel.org/stable/c/26e19622c485e53c3fdb299e822068a0542ddf0c416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/60ef1675b652e912f3eb064767af4432393291fd416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/91d13e92b983e6c6d7631012c2e20ae8057de9f2416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/dc416e32baaeb620b9809e9e25fc7b30889686e9416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
Hyperlink: https://git.kernel.org/stable/c/26e19622c485e53c3fdb299e822068a0542ddf0c
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/60ef1675b652e912f3eb064767af4432393291fd
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/91d13e92b983e6c6d7631012c2e20ae8057de9f2
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/dc416e32baaeb620b9809e9e25fc7b30889686e9
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

0Records found
Details not found