Use-after-free in Linux kernel - CVE-2026-63798
Published: July 21, 2026
Vulnerability identifier: #VU138853
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-63798
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a use-after-free in the irq-imgpdc driver when handling interrupts after driver removal. A local user can trigger spurious interrupts that access freed memory to cause a denial of service.
The issue involves dangling chained handlers for peripheral and syswake interrupts, and generic chips may remain reachable by interrupt chip suspend, resume, or shutdown callbacks after the driver has been removed.
Affected software
Linux kernel
How to mitigate CVE-2026-63798
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/0405a65e4ebd9eac13a765f9f02ac05851ca5421
- https://git.kernel.org/stable/c/37738fdf2ab1e504d1c63ce5bc0aeb6452d8f057
- https://git.kernel.org/stable/c/41826e5297e67cd96a0a46fde06a5069a8ce436a
- https://git.kernel.org/stable/c/44567537a2623dcd2b4018a7f043cf8069579e5d
- https://git.kernel.org/stable/c/8176773dfceae7978b01c20b233693e072053700
- https://git.kernel.org/stable/c/83d7ec14b0938ad8cae008058fd6f912f4a9a312
- https://git.kernel.org/stable/c/b3a3831b2eb884641906fc5e46207b205b6aea13
- https://git.kernel.org/stable/c/c2c7733101bb8c0b29ac9ee41073eaf602821a59