Use-after-free in Linux kernel - CVE-2026-64362
Published: July 27, 2026
Vulnerability identifier: #VU139612
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64362
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker with physical access to cause a denial of service.
The vulnerability exists due to use-after-free in the hid-lg-g15 driver work handling logic when a pending work item is triggered and the device is unplugged. An attacker with physical access can trigger a backlight cycle key event and disconnect the keyboard to cause a denial of service.
The issue is reachable as a race condition on device unplug for G15, G15 v2, and G510 models that initialize the work item.
Affected software
Linux kernel
How to mitigate CVE-2026-64362
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/33cd1a000daf929356aacf2b191d31714ff0615e
- https://git.kernel.org/stable/c/3b9a3919aac6977262f04d5365c0456877522a44
- https://git.kernel.org/stable/c/4aef9676c26dff8723b56834951cfc6b618f0986
- https://git.kernel.org/stable/c/4d0d51bc12d246accbfbb94de05d729c68c9b8fb
- https://git.kernel.org/stable/c/7705b4140d188ce22656f6e541ae7ef834c7e11a
- https://git.kernel.org/stable/c/8131f4226688c4be5f30874d167e44dab838eb09
- https://git.kernel.org/stable/c/acce9dee807f21184fff19ad17c8ed464247e7f7
- https://git.kernel.org/stable/c/dfc6e61f83113cc18346b6988f07271c0063357d