CVE-2026-64013 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee ("ACPI: button: Install notifier for system events as well") changed the ACPI notify handler type for ACPI buttons to ACPI_ALL_NOTIFY, but it forgot to update acpi_button_remove() to reflect that change. This leads to leaking the notify handler past driver removal, which may cause a kernel crash to occur if ACPI notify on the given device is triggered after removing the driver, and causes a subsequent probe of the given device with the same driver to fail. Address this by updating the acpi_remove_notify_handler() call in acpi_button_remove() as appropriate.
A vulnerability in the Linux kernel's ACPI button handling has been addressed. The issue arose because a previous commit changed the notification handler type for ACPI buttons but did not update the corresponding removal function. This oversight led to a leak of the notification handler after the driver was removed, potentially causing a kernel crash if an ACPI notification was received for the device after the driver had been detached. Additionally, this leak could interfere with re-probing the device with the same driver. The vulnerability affects Linux kernel versions 6.15 and later.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The specific commit that resolves the issue is available in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/614cb8c26c5aa53196ee9b211b76ee618b147d32 | kernel.org | |
| https://git.kernel.org/stable/c/fe80251152fed5b185f795ef2cd9f7fe9c3162e0 | kernel.org |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
No affected product data is available for this CVE.
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 19, 2026 | New CVE Received | kernel.org |