CVE-2026-64475 vfio/pci: Release the VGA arbiter client on register_device() failure

🗓️ 25 Jul 2026 08:51:38Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

Fix release of VGA arbiter client on register_device failure in vfio pci core to add proper unwind.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-64475	25 Jul 202608:51	–	attackerkb
CVE	CVE-2026-64475	25 Jul 202608:51	–	cve
Cvelist	CVE-2026-64475 vfio/pci: Release the VGA arbiter client on register_device() failure	25 Jul 202608:51	–	cvelist
Debian CVE	CVE-2026-64475	25 Jul 202608:51	–	debiancve
EUVD	EUVD-2026-48819	25 Jul 202608:51	–	euvd
NVD	CVE-2026-64475	25 Jul 202610:17	–	nvd
OSV	DEBIAN-CVE-2026-64475	25 Jul 202610:17	–	osv
OSV	ECHO-2743-C3F0-A8C5	26 Jul 202602:26	–	osv
Positive Technologies	PT-2026-64696	25 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64475	25 Jul 202615:58	–	susecve

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/0f2a35a0c7ea7da347b814750eaa78adf3582381
git	www.git.kernel.org/stable/c/278a5659c391fe5afe5f9ce1bad1fd24e90144f1
git	www.git.kernel.org/stable/c/42d758a09d2c46c42357ecde9a5492f015bde2e5
git	www.git.kernel.org/stable/c/52adb2dff7ce3d8430e2bdc5988b618a430def85
git	www.git.kernel.org/stable/c/8d65decde9afd2bd78bcfffdc0df73b82a0b5509
git	www.git.kernel.org/stable/c/9e0a3f642e607848669235f5069f35640abbfc88
git	www.git.kernel.org/stable/c/daedde7f024ecf88bc8e832ed40cf2c795f0796a
git	www.git.kernel.org/stable/c/ef4c38d30b3744e89eb5048218904bb629ea8d47
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64475.json

26 Jul 2026 05:17Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.0022

VGA arbiter unwind callout register device failure core fix