Use-After-Free Vulnerability in Linux Kernel Affecting Endpoint Communication

CVE-2026-63797

What is CVE-2026-63797?

A use-after-free vulnerability exists in the Linux kernel's rpmsg_chrdev_probe() function. When the function attempts to register a character device for remote procedure calls, it may lead to an unsafe state if an error occurs during the registration process. Specifically, the endpoint's private pointer can reference freed memory, allowing callbacks to operate on stale data. This could be exploited to cause unexpected behavior or crashes in the system. Appropriate measures must be taken to prevent the publication of endpoint devices before the successful registration of the remote endpoint.

References