Buffer Management Issue in Linux Kernel Affects Hardware Consumer Modules

CVE-2026-64498

What is CVE-2026-64498?

A critical vulnerability in the Linux kernel arises from improper management of the scan_mask during the buffer release process in hardware consumer modules. Following a recent structural change, the scan_mask is allocated separately from the buffer, but the release function does not account for this change. Failing to free the scan_mask before releasing the buffer can lead to memory leaks, posing a risk if exploited by an attacker.

References