SB2026072034 - Operation on a Resource after Expiration or Release in Linux kernel sysfs

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026072034

SB2026072034 - Operation on a Resource after Expiration or Release in Linux kernel sysfs

Published: July 20, 2026

Security Bulletin ID SB2026072034
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Operation on a Resource after Expiration or Release (CVE-ID: CVE-2026-64185)

CWE-ID: CWE-672 - Operation on a Resource after Expiration or Release

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper state management in sysfs_update_group() and internal_create_group() when handling updates to a named sysfs group after create_files() fails. A local user can trigger an update operation that causes file creation to fail to cause a denial of service.

The issue affects the update path for an already existing named sysfs group, which may be silently removed instead of left intact.


Remediation

Install update from vendor's website.

References