CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init()

High 7.8 Published 24 Jul 2026 Updated 24 Jul 2026

A double free vulnerability in the OcteonTX2 representor driver allows attackers to cause denial of service or potentially execute code via crafted hardware resource initialization failures.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-64224?

CVE-2026-64224 is a high-severity memory corruption vulnerability in Linux kernel, published on 24 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: fix double free in rvu_rep_rsrc_init()

rvu_rep_rsrc_init() allocates queue memory before calling otx2_init_hw_resources(). When hardware resource setup fails, otx2_init_hw_resources() already unwinds the partially initialized SQ, CQ, and aura state before returning an error. The representor error path then calls otx2_free_hw_resources() again and can free the same resources a second time.

Fix this by splitting the cleanup labels so that a failure from otx2_init_hw_resources() only releases queue memory. Keep the otx2_free_hw_resources() call for failures that happen after hardware resource initialization completed successfully.

The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc3.

Runtime validation was not performed because reproducing this path requires OcteonTX2 representor hardware.

Weakness: CWE-415

Which versions are affected by CVE-2026-64224?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2026-64224?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-64224 being exploited?

There is no known exploitation of CVE-2026-64224 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as BELL-CVE-2026-64224, DEBIAN-CVE-2026-64224, GHSA-8rr8-rp2r-rgh8, ROOT-OS-UBUNTU-2204-CVE-2026-64224, UBUNTU-CVE-2026-64224.