CVE-2026-64147

pds_core: fix debugfs_lookup dentry leak and error handling

State: Published
Severity: Not scored
Published: Jul 19, 2026
Updated: Jul 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pds_core: fix debugfs_lookup dentry leak and error handling

debugfs_lookup() returns a dentry with an elevated reference count that must be released with dput(). The current code discards the returned dentry without calling dput(), causing a reference leak on every firmware reset recovery.

Additionally, when CONFIG_DEBUG_FS is disabled, debugfs_lookup() returns ERR_PTR(-ENODEV), not NULL. The current check passes for error pointers and would call dput() on an invalid pointer, causing a crash.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2bbf2b1c20f934a054172175ccbabcc01fe69ef6 to before 60ef1675b652e912f3eb064767af4432393291fdAffected bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before 26e19622c485e53c3fdb299e822068a0542ddf0cAffected bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before 91d13e92b983e6c6d7631012c2e20ae8057de9f2Affected bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32Affected bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before dc416e32baaeb620b9809e9e25fc7b30889686e9Affected 3ffe14c36985e3174933127c9efad82ac8f3fefbAffected 6.6.16 to before 6.6.142Affected 6.7.4 to before 6.8Affected
LinuxLinux	6.8Affected before 6.8Not affected 6.6.142 through 6.6.Not affected 6.12.92 through 6.12.Not affected 6.18.34 through 6.18.Not affected 7.0.11 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

2bbf2b1c20f934a054172175ccbabcc01fe69ef6 to before 60ef1675b652e912f3eb064767af4432393291fdAffected
bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before 26e19622c485e53c3fdb299e822068a0542ddf0cAffected
bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before 91d13e92b983e6c6d7631012c2e20ae8057de9f2Affected
bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before d7f4dd4c8fb380898fef7a77d48fce7ccdb4fc32Affected
bc90fbe0c3182157d2be100a2f6c2edbb1820677 to before dc416e32baaeb620b9809e9e25fc7b30889686e9Affected
3ffe14c36985e3174933127c9efad82ac8f3fefbAffected
6.6.16 to before 6.6.142Affected
6.7.4 to before 6.8Affected

LinuxLinux

6.8Affected
before 6.8Not affected
6.6.142 through 6.6.*Not affected
6.12.92 through 6.12.*Not affected
6.18.34 through 6.18.*Not affected
7.0.11 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.