Error Handling Issue in Linux Kernel's pds_core Component

CVE-2026-64148

What is CVE-2026-64148?

In the Linux kernel's pds_core, a critical error handling flaw was found within the pdsc_devcmd_wait function. This issue manifests in two scenarios: during firmware crashes and command timeouts. In the case of a firmware crash, the function exited prematurely, returning stale success instead of an error, thereby bypassing necessary error handling. Similarly, in timeout scenarios, the error flag was improperly overwritten, resulting in the loss of valid timeout status. Both circumstances prevented correct error propagation, which could lead to silent failures in device command executions without adequate recovery mechanisms being triggered.

References