CVE-2026-64420: linux kernel from 4.12 (inclusive), before 5.10.261 (exclusive), from 5.11 (inclusive), before 5.15.212 (exclusive)…

Affected technology

linux kernel · from 4.12 (inclusive), before 5.10.261 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.212 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.178 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.96 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

Linux · 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before 24522713034d521ea4b5f5f36342e2b2f7e73bd6, 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before f7e81dc181d9fe8ab977158042cd193e8cc12091, 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before 257203d83204b192d1265a916b42ca0d499bb117, 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before 729ae27dc2503a7c1f92da1859efb45da03e4fa0, 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before ed2941e5db016a0c600b25f1972620e6e223d9fa, 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before b5f41d5bf08e7b1b14fa0bd640975e6d78dc006d, 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before fc030c5b116f668d4ca86dca63742ddbc98d1665, 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b to before 8b2c1d41bc36c100b38ce5ee6def246c527eaf8a
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/mfd/cros_ec_dev.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.