SB20260727328 - Improper resource shutdown or release in Linux kernel mips kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260727328

SB20260727328 - Improper resource shutdown or release in Linux kernel mips kernel

Published: July 27, 2026

Security Bulletin ID SB20260727328
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper resource shutdown or release (CVE-ID: CVE-2026-64248)

CWE-ID: CWE-404 - Improper Resource Shutdown or Release

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper shutdown handling in stop_this_cpu() when processing reboot or shutdown operations after secondary CPUs are parked. A local user can trigger a reboot or shutdown sequence to cause a denial of service.

The issue affects MIPS systems where RCU continues waiting for quiescent states from parked CPUs, which can cause the reboot or shutdown process to hang.


Remediation

Install update from vendor's website.

References