Linux Kernel Vulnerability in Amlogic Crypto Driver

CVE-2026-64599

What is CVE-2026-64599?

A vulnerability in the Amlogic crypto driver within the Linux kernel allows for a double-free scenario during the handling of partial allocation failures. This occurs within the meson_crypto_probe function when an earlier allocation call returns an error. As a result, the cleanup process may inadvertently trigger a second deallocation on already freed resources, leading to potentially unsafe memory access and stability concerns. Patching this vulnerability involves modifying the error handling logic to ensure that resources are managed correctly even when allocations are only partially successful, thus preventing any memory management issues.

References