CVE-2026-64246: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()
High 7.8 EPSS 0.1% Linux kernel
In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() Move of_node_put(dn) after the of_match_node() call, which still needs the node pointer. The node reference is correctly released after use.
- CVE-2026-64246CVE identifier
- 7.8CVSS 3.1 base score (high)
- 0.1%EPSS: chance of exploitation in the next 30 days (higher than 2% of CVEs)
- 2026-07-24published
What do these terms mean? CVE · CVSS score · exploited (KEV) · EPSS · backported fix · all terms
What to do now
- Check whether you run Linux kernel and which version (commands below).
- Install the fixed version for your system: see “Patch it” below.
- Reboot into the new kernel (uname -r to confirm); live patching (kpatch, Ubuntu Livepatch, SUSE kGraft/klp) can defer the reboot for some CVEs
Affected and fixed versions
Affected:
- Linux Linux e2f471efe1d607a7aff38ce53ec717cebe4283d6 to before 93c7ee139721936b6fa717572e74d3994603ae13
- Linux Linux e2f471efe1d607a7aff38ce53ec717cebe4283d6 to before cdda7d384c05485a232ae9a849f6445accb095bf
- Linux Linux e2f471efe1d607a7aff38ce53ec717cebe4283d6 to before c04d606f8b35ee7d3ed243f63893a607e9d6c0bc
- Linux Linux e2f471efe1d607a7aff38ce53ec717cebe4283d6 to before 3928ae803dee044b01076c478c279c0bd54164cd
- Linux Linux e2f471efe1d607a7aff38ce53ec717cebe4283d6 to before 2205275be9be981e70ff29610b0117d8853fac70
- Linux Linux e2f471efe1d607a7aff38ce53ec717cebe4283d6 to before d109e72f3fbccb540473285d17d7519584f7f76e
- Linux Linux e2f471efe1d607a7aff38ce53ec717cebe4283d6 to before 8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd
- Linux Linux 5.15
Patch it
Use the commands for your system. Distribution packages often keep an older version number with the fix backported, so compare with the fixed package versions in the table below, not only with the upstream version.
Debian
sudo apt update
sudo apt install --only-upgrade linux-image-amd64Ubuntu
sudo apt update
sudo apt install --only-upgrade linux-image-generic (or the installed flavour: linux-image-aws, -azure, -gcp, -virtual)RHEL, AlmaLinux, Rocky, Oracle
sudo dnf upgrade --refresh kernelFedora
sudo dnf upgrade --refresh kernelSUSE / openSUSE
sudo zypper refresh
sudo zypper update kernel-defaultAmazon Linux
sudo dnf upgrade --releasever=latest kernel kernel6.12Arch Linux
sudo pacman -SyuAlpine
apk update && apk upgrade linux-lts linux-virtFreeBSD
not LinuxGeneral update steps for every system are on the Linux and Unix & BSD pages; after updating, see which services to restart.
Fix status in Linux distributions
| Release | Package | Status | Fixed version / advisory |
|---|---|---|---|
| Debian 12 | linux | fixed | 6.1.177-1 |
| Debian 13 | linux | fixed | 6.12.95-1 |
| Debian testing | linux | fixed | 7.1.3-1 |
From the Debian security tracker, Ubuntu CVE tracker and Red Hat Security Data API, refreshed every few hours.
Sources
- https://git.kernel.org/stable/c/93c7ee139721936b6fa717572e74d3994603ae13
- https://git.kernel.org/stable/c/cdda7d384c05485a232ae9a849f6445accb095bf
- https://git.kernel.org/stable/c/c04d606f8b35ee7d3ed243f63893a607e9d6c0bc
- https://git.kernel.org/stable/c/3928ae803dee044b01076c478c279c0bd54164cd
- https://git.kernel.org/stable/c/2205275be9be981e70ff29610b0117d8853fac70
- https://git.kernel.org/stable/c/d109e72f3fbccb540473285d17d7519584f7f76e
- https://git.kernel.org/stable/c/8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd
- CVE-2026-64246 on CVE.org
- CVE-2026-64246 on NVD
Page generated automatically from official sources on 2026-11-03 18:05 UTC. Always confirm with your vendor's advisory.