Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-64370

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path In do_cpu_nanosleep(), posix_cpu_timer_create() takes a pid reference via get_pid() and stores it in timer.it.cpu.pid. If the subsequent posix_cpu_timer_set() call fails, the function returns immediately without calling posix_cpu_timer_del() to release the pid reference, causing a leak. Fix it by calling posix_cpu_timer_del() before the unlock-and-return on the error path, consistent with the other exit paths in the same function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 9.3%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-64370


Contact Us

Shodan ® - All rights reserved