Out-of-bounds read in Linux kernel - CVE-2026-64496
Published: July 27, 2026
Vulnerability identifier: #VU139440
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64496
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to an out-of-bounds read in the iio event FIFO handling in drivers/iio/industrialio-event.c when reading from a newly created event file descriptor concurrently with FIFO reset. A local user can read from the file descriptor from another thread to disclose sensitive information.
Exploitation requires shared file descriptor table access between threads, creating a race window before the fd number is returned to userspace.
Affected software
Linux kernel
How to mitigate CVE-2026-64496
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/0d4a646d7f87ea3625fafe387043fddc6a2f5e7f
- https://git.kernel.org/stable/c/72c6aa8e0d74eab91b8694cde97dec088c248fee
- https://git.kernel.org/stable/c/9dc84ba4be5bbeb29ee49efe6cea2cb32c461424
- https://git.kernel.org/stable/c/9edefd4c56bee3fe331e0355d1f10a533134999d
- https://git.kernel.org/stable/c/a13ef1adbc62085b21b546b07b0be7e2fbf52150
- https://git.kernel.org/stable/c/af791d295737ea6b6ff2c8d8488462a49c14af01
- https://git.kernel.org/stable/c/d16a702ca7d29c0b7a9b509339d1b044a1cadb32
- https://git.kernel.org/stable/c/f187dc5a4c4846ffa07d9bda6e760837ed005574