High 7.8Published Jul 24, 2026

CVE-2026-64246power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

Updated under an hour ago (Oct 27, 2026, 2:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() Move of_node_put(dn) after the of_match_node() call, which still needs the node pointer. The node reference is correctly released after use.

CVSS: 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e2f471efe1d607a7aff38ce53ec717cebe4283d6 before 93c7ee139721936b6fa717572e74d3994603ae13; from e2f471efe1d607a7aff38ce53ec717cebe4283d6 before cdda7d384c05485a232ae9a849f6445accb095bf; from e2f471efe1d607a7aff38ce53ec717cebe4283d6 before c04d606f8b35ee7d3ed243f63893a607e9d6c0bc; from e2f471efe1d607a7aff38ce53ec717cebe4283d6 before 3928ae803dee044b01076c478c279c0bd54164cd; from e2f471efe1d607a7aff38ce53ec717cebe4283d6 before 2205275be9be981e70ff29610b0117d8853fac70; from e2f471efe1d607a7aff38ce53ec717cebe4283d6 before d109e72f3fbccb540473285d17d7519584f7f76e; from e2f471efe1d607a7aff38ce53ec717cebe4283d6 before 8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 5.15.211; from 5.16 before 6.1.177; from 6.2 before 6.6.144; from 6.7 before 6.12.95; from 6.13 before 6.18.38; from 6.19 before 7.1.3	NVD

References

References

https://git.kernel.org/stable/c/93c7ee139721936b6fa717572e74d3994603ae13	patch
https://git.kernel.org/stable/c/cdda7d384c05485a232ae9a849f6445accb095bf	patch
https://git.kernel.org/stable/c/c04d606f8b35ee7d3ed243f63893a607e9d6c0bc	patch
https://git.kernel.org/stable/c/3928ae803dee044b01076c478c279c0bd54164cd	patch
https://git.kernel.org/stable/c/2205275be9be981e70ff29610b0117d8853fac70	patch
https://git.kernel.org/stable/c/d109e72f3fbccb540473285d17d7519584f7f76e	patch
https://git.kernel.org/stable/c/8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.