CVE-2026-64148
In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pdsc_devcmd_wait() returns stale success from the completion register instead of an error: 1. FW crash: If firmware stops running, the wait loop breaks early with running=false. The condition "if ((!done || timeout) && running)" is false, so error handling is bypassed and stale status is returned. Check !running first and return -ENXIO. 2. Timeout: If a command times out, err is set to -ETIMEDOUT but then overwritten by pdsc_err_to_errno(status) which reads stale status. Return -ETIMEDOUT immediately after cleaning up. Both errors now propagate to pdsc_devcmd_locked() which queues health_work for recovery.
Affected versions
Linux kernel versions
6.4
and later are affected. Fixed in
6.6.142,
6.12.92,
6.18.34,
7.0.11,
7.1
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-64148?
CVE-2026-64148 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.4 onward and has been patched in 6.6.142, 6.12.92, 6.18.34 and others. CVE-2026-64148 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-64148?
Yes — CVE-2026-64148 has been patched. Fixed versions include 6.6.142, 6.12.92, 6.18.34 and others. If you are running Linux kernel 6.4 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-64148 actively exploited?
No — CVE-2026-64148 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.