In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xhci_ring_to_sgtable() allocates a temporary pages array and uses it to build the returned sg_table with sg_alloc_table_from_pages(). The error paths free the pages array, but the success path returns the sg_table without freeing it. This leaks the temporary array every time a sideband client gets an endpoint or event ring buffer. Free the pages array after sg_alloc_table_from_pages() succeeds. The returned sg_table has its own scatterlist entries and does not depend on the temporary array after construction.

A flaw was found in the Linux kernel's xHCI (eXtensible Host Controller Interface) sideband functionality. A memory leak occurs in the `xhci_ring_to_sgtable()` function because a temporary memory array is not properly released after use. This continuous leakage of memory can lead to system instability and a Denial of Service (DoS) over time, impacting the availability of the system.

Red Hat Enterprise Linux 10 Fix deferred kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Fix deferred kernel Red Hat Enterprise Linux 9 Fix deferred kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-64464 https://nvd.nist.gov/vuln/detail/CVE-2026-64464 https://lore.kernel.org/linux-cve-announce/2026072544-CVE-2026-64464-f655@gregkh/T